services / Azure / Private DNS CNAME record set

A CNAME record set aliases an internal hostname to a canonical name within an Azure Private DNS zone, used for name resolution inside linked virtual networks.

Private (internal) records, not public-facing; supports a single organizational network function.

Microsoft.​Network/​privateDnsZones/​CNAME/​write

Creating/updating the record set re-aliases an internal hostname to an attacker-chosen target, redirecting internal traffic for that name (DNS hijack within the private zone).

Risks

1. Domain takeover (CRITICAL)
2. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links