Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
CWE-284