services / Azure / Garnet cluster sorted-set data

Azure Managed Garnet is a Redis-compatible in-memory data store; this resource type is the data-plane (ACL-scoped) command surface over sorted sets and other structures held in the cluster.

Holds production application data (caches, sessions, queues, sorted sets) for a single organizational function; data-plane access reads/writes/deletes the stored records directly.

Microsoft.​DocumentDB/​garnetClusters/​acl/​zrevrangebyscore/​read

ZREVRANGEBYSCORE returns stored sorted-set member values within a score range, enabling data exfiltration.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links