Improper access control in Azure Front Door enables an unauthorized attacker to elevate privileges over a network. This can allow an attacker to gain higher permissions within Azure Front Door, potentially compromising resources protected by the service. The weakness is identified as CWE-284, improper authorization.

Microsoft Azure Front Door is affected. No specific version details are provided, implying that all current Azure Front Door deployments that have not applied the latest security update are vulnerable.

The CVSS score of 9.8 signals a severe risk, while the EPSS score of less than 1% indicates that exploitation is expected to be uncommon at this time. The vulnerability is not yet listed in the CISA KEV catalog. Based on the description, the attacker would need network access to an Azure Front Door instance and would exploit a control plane access control flaw; the exact exploitation steps are not detailed but are inferred to involve remote network access.