New Azure App Services security research by NetSPI's @kfosaaen.bsky.social
TL;DR: Users with Contributor permissions can extract & decrypt authentication tokens to impersonate other users accessing the application.
Read more: ow.ly/tgUA50Wuqpb
#Azure #CloudSecurity