This vulnerability in Microsoft Azure Data Explorer involves the exposure of sensitive information to unauthorized actors over a network. It is identified as CWE-200, indicating that sensitive data can be disclosed without proper authorization. The CVSS 3.1 vector indicates that the attack can be performed remotely over the network with low attack complexity, no privileges required, but user interaction is needed. The scope is changed, and the impact on confidentiality is high, while integrity and availability are not affected. Microsoft has released a patch to remediate this vulnerability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from Azure Data Explorer. The confidentiality impact is high, meaning sensitive data could be exposed to attackers without authorization. There is no impact on integrity or availability. No known exploits are currently reported in the wild.

A patch is available for this vulnerability. It is recommended to apply the official fix provided by Microsoft to remediate the issue. Since this is not a cloud-hosted service vulnerability, manual patching by administrators is required. There are no vendor advisories indicating that no action is required or that the issue is already mitigated.