services / Azure / Storage Queue Service Messages

Queue messages are the individual data payloads (work items) enqueued in a storage queue for asynchronous processing by downstream consumers.

Message payloads may contain sensitive operational data, identifiers, or commands that drive downstream automation.

Microsoft.​Storage/​storageAccounts/​queueServices/​queues/​messages/​read

This data action returns the contents of a queue message, enabling exfiltration of potentially sensitive payload data.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links