High-privilege spoofing via undisclosed access-control failure

Improper access control in eleven Microsoft Azure VM series allows local users with VM administrator access to perform spoofing. Microsoft has not published the affected control, the identity boundary it fails to enforce, or the operation used to spoof another principal. Exploitation requires high privileges inside an affected guest and can compromise confidentiality and integrity across a changed security scope, without reported service interruption.