services / Azure / Network Manager IPAM pool

An IPAM pool within Azure Virtual Network Manager is a managed reservation of IP address space from which Azure and non-Azure resources draw non-overlapping allocations.

Primarily an address-space inventory/management object; abuse is limited to allocation manipulation that can cause routing/overlap problems rather than direct data or policy compromise.

Microsoft.​Network/​networkManagers/​ipamPools/​write

Creating/updating a pool alters the managed address space; overlapping or reshaped ranges can break allocation logic and induce routing/addressing conflicts for resources drawing from the pool.

Risks

1. Data manipulation (HIGH)
2. Denial-of-service (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links