The vulnerability allows an attacker to spoof authentication credentials in Azure HorizonDB, bypassing normal authentication checks and gaining elevated privileges over the network. As a result, an unauthorized user can access resources and perform actions that should only be available to verified accounts, potentially compromising sensitive data and system integrity.

Microsoft Azure HorizonDB is the affected product. The vulnerability impacts systems running Microsoft Azure HorizonDB services; no specific version information is provided in the data available.

The CVSS score of 10 indicates a critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, so exploitation statistics are unknown, but the high CVSS indicates a severe risk. The likely attack vector involves a network-based spoofing attempt against the HorizonDB authentication process, requiring the attacker to reach the service endpoint and send forged credentials. While no explicit attacker prerequisites are stated, the vulnerability can be leveraged remotely by anyone who can reach the HorizonDB network segment.