A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.