Microsoft Password Reset Portal Can Leak Account Verification Details

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.

≈