services / Azure / Reassociate Site Recovery fabric gateway

Reassociates the gateway/process server used by a Site Recovery replication fabric to carry replication traffic between protected workloads and their recovery copies.

Changing the gateway relocates the replication data path; an attacker can redirect it through an attacker-influenced server to intercept or disrupt the flow of replicated workload data.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​reassociateGateway/​action

Redirects replication traffic to a different gateway, letting an attacker reroute the DR data path onto infrastructure they control or influence.

Risks

1. Data manipulation (HIGH)
2. Network movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links