writeups.xyz / These Services Shall Not Pass: Abusing Service Tags to Bypass Azure Firewall Rules (Customer Action Required)

Submitter : c2a

Date: 3 June 2024

Bounty : undisclosed

Vulnerabilities :

• Cloud
• WAF Bypass
• SSRF

Programs :

• Microsoft (Azure)

Authors :

• Liv Matan (@TerminatorLM)

Link :
https://www.tenable.com/blog/these-services-shall-not-pass-abusing-service-tags-to-bypass-azure-firewall-rules-customer