apim

A design oversight in Microsoft’s Azure API Management Developer Portal now allows attackers to create accounts on tenants where administrators have visually disabled sign‑up, enabling cross‑tenant account creation and potentially exposing subscription keys and API access unless operators act...

A design oversight in the Azure API Management (APIM) Developer Portal lets attackers create user accounts on tenants that administrators have visually disabled signup for — and Microsoft’s public guidance treats this behavior as by design, leaving organizations to rely on configuration changes...