Microsoft rejects critical Azure vulnerability report, no CVE issued

A security researcher reported a critical Azure vulnerability to Microsoft, but the company rejected the report and did not issue a CVE. The researcher claims that Microsoft quietly fixed the vulnerability despite rejecting the report. Microsoft disputes this claim, stating that the behavior was expected and no product changes were made.