The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) arises from insufficient validation of requests on the server side. This allows attackers to perform spear-phishing attacks.

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...