Authenticated security bypass via undisclosed authorization flaw

Improper authorization in Microsoft Windows Server Service allows remote authenticated users to bypass security controls over a network. Microsoft has not disclosed the affected Server Service code path or the authorization check that mishandles attacker-controlled requests. An authenticated network session is required, but Microsoft has not disclosed which protected action becomes available or how service operation is affected.