This vulnerability, identified as CWE-749, exists in Microsoft Azure Confidential Ledger where a dangerous method or function is exposed. An attacker with authorized access can exploit this flaw to execute arbitrary code remotely over the network. The vulnerability is rated critical with a CVSS 3.1 score of 9.1, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. Microsoft manages remediation for this cloud-hosted service and has released an official fix.

An authorized attacker can remotely execute arbitrary code on the Azure Confidential Ledger service, potentially leading to full compromise of confidentiality, integrity, and availability of the service. This could allow unauthorized data access, modification, or disruption of ledger operations.

Microsoft has released an official fix for this vulnerability in Azure Confidential Ledger. As this is a cloud service, Microsoft manages the remediation server-side. Users should verify that their Azure Confidential Ledger instances are updated according to Microsoft's advisory to ensure protection.