services / Azure / Garnet cluster cache data

Garnet is a Redis-compatible in-memory cache/data store offered under Azure Cosmos DB (Microsoft.DocumentDB). These ACL-scoped data-plane operations read, write, and delete keys/values held in the cluster.

Production cache data stores typically hold session state, application data, and sometimes sensitive values; access is scoped to a single organizational function.

Microsoft.​DocumentDB/​garnetClusters/​acl/​substr/​read

SUBSTR returns actual stored string content (a substring), allowing an attacker to read out cached data.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links