---
id: 7823
title: "Elevating Privileges with Azure Site Recovery Services"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/elevating-privileges-with-azure-site-recovery-services/"
published_at: "2024-03-28T00:00:00Z"
tags: ["cloud", "cloud-security", "microsoft", "privilege-escalation", "penetration-testing", "azure", "managed-identity"]
phying_url: "https://phying.com/item/7823"
lang: en
---

# Elevating Privileges with Azure Site Recovery Services

## Summary

Azure Site Recovery's Automation Account leaked a cleartext Contributor-level Managed Identity token in job output, enabling privilege escalation; NetSPI reported the flaw and Microsoft remediated it.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-03-28T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/elevating-privileges-with-azure-site-recovery-services/
- **Phying News:** https://phying.com/item/7823