services / Azure / Garnet cluster hash data

A hash data structure within a Microsoft DocumentDB Garnet cluster, a Redis-compatible in-memory data store. This is a data-plane (isDataAction) operation on the actual cached records.

Garnet clusters are production in-memory data stores holding operational/application data for a single organizational function; data-plane access touches the records themselves.

Microsoft.​DocumentDB/​garnetClusters/​acl/​hscan/​read

HSCAN iterates and returns hash field-value pairs, exposing actual stored values and enabling bulk data exfiltration.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links