Microsoft Accused of Mishandling Critical Power Platform Vulnerability

Microsoft Accused of Mishandling Critical Power Platform Vulnerability

Microsoft has been criticized for handling a critical Power Platform vulnerability poorly, which exposed authentication information and other confidential information from businesses.

A serious flaw in Microsoft’s Power Platform was identified in March by researchers at vulnerability management company Tenable. The platform enables businesses to analyze data, create applications, and automate processes.

It can be connected to Microsoft 365, Azure, and other apps. “Inadequate access control to Azure Function hosts, which are launched as part of the creation and operation of custom connectors in Microsoft’s Power Platform,” was the source of the security flaw.

An attacker could have gained access to cross-tenant applications, obtained authentication keys, and other sensitive data by exploiting the vulnerability.

Read More: Microsoft Criticized Over Handling of Critical Power Platform Vulnerability

For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates.