services / Azure / Web App config snapshots

Saved point-in-time configuration snapshots of a Web App, used as restore points; the read enumerates available snapshots and their metadata.

Listing returns only snapshot metadata/restore-point inventory, not the secret values they contain (a separate listsecrets action).

Microsoft.​Web/​Sites/​config/​Snapshots/​listSecrets/​action

Returns app settings and connection strings from a config snapshot, directly exporting reusable credential material.

Risks

1. Cryptographic exfiltration (CRITICAL)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links