Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.