services / Azure / Virtual Hub

A Virtual Hub is the routing core of an Azure Virtual WAN, terminating branch/VNet connections and holding the route tables that steer traffic across the WAN.

The hub is the central routing point of a Virtual WAN; controlling its routing redirects or intercepts traffic across every connected VNet and branch.

Microsoft.​Network/​virtualHubs/​effectiveRoutes/​action

Returns the effective routes on the hub, disclosing the WAN's reachable topology and next-hops; inboundRoutes and outboundRoutes are equivalent route-disclosure actions carrying the same discovery risk.

Risks

1. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links