Microsoft Power Pages Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in Microsoft Power Pages that involves improper access control, allowing unauthorized attackers to elevate privileges over the network. This issue could potentially bypass user registration controls. The vulnerability has been mitigated in the service, and all affected customers have been notified. Instructions for reviewing sites for potential exploitation and cleanup methods have been provided to these customers.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.