services / Azure / Network Profile

A Network Profile defines container networking configuration (container network interfaces and their subnet/IP settings) used to attach container workloads to a VNet.

Controls how container workloads are wired into the VNet; manipulation can place attacker workloads on the network or reattach existing ones into different segments.

Microsoft.​Network/​networkProfiles/​write

Creating/updating a profile defines the container NIC/subnet wiring; an attacker can attach container workloads into a chosen VNet segment, gaining network reach and altering the intended networking configuration.

Risks

1. Data manipulation (HIGH)
2. Network movement (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links