Microsoft rejects critical Azure vulnerability report, no CVE issued(www.bleepingcomputer.com)
4 pointsby rurban7 hours ago1 comment
  • bell-cot6 hours ago
    Not that I'm an Azure expert, or trust Microsoft to tell the truth...but any privilege with "backup" in its name strikes me as security-critical.

    Any experts care to comment?

    • winstonwinston4 hours ago
      I think it’s problematic that one permission was automatically adding another high trust permission, that they argued as expected behavior and then they silently changed this behavior, fixing the reported security issue.