services / Azure / Network Virtual Appliance

A Network Virtual Appliance (NVA) is a third-party firewall/router VM appliance that inspects and forwards network traffic in a VNet or Virtual WAN hub.

An NVA sits in the traffic path inspecting/forwarding production traffic; controlling it enables interception, redirection, or disruption of that traffic.

Microsoft.​Network/​networkVirtualAppliances/​getBootDiagnosticLogs/​action

Returns the appliance's boot/serial diagnostic logs, which can leak bootstrap secrets, configuration, or credentials emitted during startup.

Risks

1. Logs exfiltration (MEDIUM)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links