Summary
Azure AD users could escalate their privileges using the Log Analytics
Contributor role to reach the full Subscription Contributor role.
Affected Services
Log Analytics
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/0xdabbad00
Disclosure Date
Thu, Oct 15th, 2020
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Karl Fosaaen, NetSPI
