services / Azure / Garnet cluster data (set)

A Garnet cluster is a Microsoft Redis-compatible in-memory data store; this is a data-plane operation governed by an ACL on the cached data it holds.

Production cache data store supporting a single application function; its contents can include session, application, and potentially sensitive cached data.

Microsoft.​DocumentDB/​garnetClusters/​acl/​spop/​delete

SPOP both removes random members from a set (destroying cached data) and returns those member values to the caller (exfiltrating them) in a single operation.

Risks

1. Data destruction (CRITICAL)
2. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links