Azure Automation Flaw Could Let Attackers Hijack Cross-Tenant Identities

Microsoft fixed a public-by-default configuration and code flaws in Azure Automation that could allow attackers to seize another tenant's identity. The vulnerabilities could enable access to other tenants' data, credentials, and cloud workloads. Microsoft addressed the issue after responsible disclosure.