services / Azure / Garnet cluster set data

Garnet is a Redis-compatible in-memory cache/data store offered under Azure Cosmos DB (Microsoft.DocumentDB). This operation acts on set data structures held within a Garnet cluster's data plane.

Production cache data store supporting a single organizational function; data-plane operations read or mutate the cached organizational data directly.

Microsoft.​DocumentDB/​garnetClusters/​acl/​srandmember/​read

SRANDMEMBER returns actual member values from a set, exposing stored organizational data to an attacker (data-plane read of values, not mere enumeration).

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links