services / Azure / Azure SQL Database import

Imports a bacpac file from a storage location into an existing (or new) Azure SQL Database.

Loads external, attacker-influenceable content into a production database.

Microsoft.​Sql/​servers/​databases/​import/​action

The import source references a storage account/container chosen by the caller, which can be attacker-controlled; this lets an attacker overwrite or plant data that downstream consumers of the database will trust, staging a bacpac that is loaded into the database as a vector for injecting malicious content.

Risks

1. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links