services / Azure / Integration Account Schema

A message schema (XSD/EDI flat-file definition) in an Azure Logic Apps Integration Account used to validate and transform B2B/integration messages.

Supporting integration metadata for a single integration function; describes message structure rather than holding secrets.


Microsoft.​Logic/​integrationAccounts/​schemas/​listContentCallbackUrl/​action

Returns a pre-authenticated callback URL granting direct access to the schema's raw content, letting an attacker export the message-structure definitions without further authorization.

Risks

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Logic
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog