services / Azure / Web App Slot configuration

The configuration sub-resource of an App Service deployment slot, holding the slot's runtime/site settings, app settings, and connection strings. Slots are staging/production variants of a Web App.

The control-plane Read masks secret values; the security-sensitive settings (publishing credentials, connection strings) are returned only by the separate list/Action.

Microsoft.​Web/​Sites/​slots/​config/​list/​action

Explicitly returns the slot's security-sensitive settings including publishing credentials, app settings, and connection strings; the publishing credentials are a reusable deployment credential and connection strings yield access to backing data stores.

Risks

1. Account takeover (CRITICAL)
2. Cryptographic exfiltration (CRITICAL)
3. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links