Azure Privilege Escalation via Azure API Permissions Abuse

Published

2021-12-01 18:12

Collected

2026-10-17 09:23

---
id: 9754
title: "Azure Privilege Escalation via Azure API Permissions Abuse"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2021/12/01/azure-privilege-escalation-via-azure-api-permissions-abuse/"
published_at: "2021-12-01T18:12:00Z"
tags: ["cloud"]
phying_url: "https://phying.com/item/9754"
lang: en
---

# Azure Privilege Escalation via Azure API Permissions Abuse

## Summary

Intro and Prior Work Microsoft’s Azure is a complicated system of principals, securable objects, and the various ways access is granted to those objects. Some privileged actions are tightly controlled by Azure AD roles, while other actions are controlled by roles and object ownership. Many objects in Azure are subject to distinct permissions systems, which […]

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2021-12-01T18:12:00Z
- **Original:** https://specterops.io/blog/2021/12/01/azure-privilege-escalation-via-azure-api-permissions-abuse/
- **Phying News:** https://phying.com/item/9754