Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.