The vulnerability exposes sensitive information in Azure Entra ID, allowing an attacker to perform spoofing over a network. The breach enables an unauthorized actor to impersonate legitimate users or services, potentially gaining unauthorized access to protected resources. The weakness is classified as CWE-200, indicating an information exposure flaw that can be leveraged for authentication bypass.

Microsoft Enterprise Security Token Service (ESTS) is affected. No specific version information is provided in the available data, so all deployments of ESTS with the exposed functionality are at risk.

With a CVSS score of 9.3, the vulnerability is considered critical. The EPSS score is not available, but the absence of a KEV listing does not reduce the likelihood of exploitation. The attack vector is inferred to be network-based, requiring that an attacker can send crafted requests to the ESTS endpoint to obtain forged tokens or other identifying information. Given the high severity and potential for impersonation, the risk to confidentiality, integrity, and availability is significant.