services / Azure / Integration Account Agreement

A B2B trading-partner agreement in an Azure Logic Apps Integration Account, defining how messages are exchanged with a partner (AS2/X12/EDIFACT protocol settings, partner identities, send/receive routing).

Supporting integration infrastructure for a single B2B/integration function; configuration can reveal partner identities and message-processing details.

Microsoft.​Logic/​integrationAccounts/​agreements/​listContentCallbackUrl/​action

Returns a pre-authenticated callback URL granting direct access to the agreement's raw content, letting an attacker export the trading-partner agreement data (partner/protocol details) without further authorization.

Risks

1. Data exfiltration (CRITICAL)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links