services / Azure / Web App publishing profile XML

An Azure App Service site (Web App, Function App, or Logic App Standard) is a managed hosting resource that runs an organization's application code, often with an attached managed identity, app settings/connection strings, and a public-facing endpoint.

Production application hosting for a single organizational function; can hold secrets in app settings, run code under a managed identity, and serve public traffic.

Microsoft.​Web/​Sites/​publishxml/​read

Returns the publish profile XML with deployment credentials, exporting secret material that lets an attacker deploy/run arbitrary code as the app and take over its deployment access.

Risks

1. Account takeover (CRITICAL)
2. Cryptographic exfiltration (CRITICAL)
3. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links