Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

NIST Computer Security Resource Center

The Computer Security Resource Center (CSRC) has information on many of NIST's cybersecurity- and information security-related projects, publications, news and events. CSRC supports people and organizations in government, industry, and academia—both in the U.S. and internationally.