Azure API Management Flaw Allows Unauthorized Cross-Tenant Account Creation
First seen 1 Dec 2025, 15:41 UTC
•
•79% similarity
•31
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A design flaw in Microsoft Azure's API Management Developer Portal enables unauthorized account creation across different tenants. Microsoft has classified this behavior as 'by design', despite the significant security risks it poses to organizations using the service.
ThreatCluster AI