This vulnerability enables an unauthorized network actor to access sensitive data stored in Azure Data Explorer. The flaw is an information disclosure weakness classified as CWE-200, allowing attackers to read data that should be restricted, thereby compromising confidentiality.

The affected product is Microsoft Azure Data Explorer. No specific versioning information is provided by the CNA; service administrators should verify whether their deployments have applied the latest update that addresses this issue.

The CVSS score of 7.4 indicates a high potential impact if the vulnerability is exploited. The EPSS score is less than 1%, suggesting that exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog, so it does not appear to be actively exploited. The likely attack vector is network-based; an adversary would require network access to the Azure Data Explorer instance and may exploit exposed endpoints or misconfigured permissions to gain unauthorized data access.