services / Azure / Storage Tables

An Azure Storage Table is a NoSQL key-attribute data store within a storage account that holds structured organizational entity data (rows).

Tables are a production data store supporting a single organizational function; their entities can hold confidential application data.

Microsoft.​Storage/​storageAccounts/​tableServices/​tables/​setAcl/​action

Despite the mislabeled displayName ('Merge or update table entities'), setAcl writes the table's stored access policy (signedIdentifiers) that backs SAS tokens; an attacker can define a permissive policy to grant/broaden access to the table data and alter its access-control configuration.

Risks

1. Privilege escalation (CRITICAL)
2. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links