Microsoft Live Accounts Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Outlook Web Access (OWA) regarding a possible unsigned token. An attacker who successfully exploited this vulnerability could have access to another person's email inbox. To exploit this vulnerability, an attacker would first have to replace an unsigned token with a different one. This vulnerability has been mitigated for all users' Microsoft Live accounts.