Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.