writeups.xyz / Azure security — Internal recon leveraging lack of access control

Submitter : c2a

Date: 2 February 2023

Bounty : undisclosed

Vulnerabilities :

• Azure AD
• Cloud
• Security Misconfiguration
• Privilege Escalation

Programs :

• Microsoft (Azure)

Authors :

• Molx32

Link :
https://molx32.github.io/blog/2023/Azure-access-panel-lack-of-access-control/