A missing authentication requirement for a critical function allows an unauthorized attacker to elevate privileges over a network. This flaw enables an attacker to bypass permission boundaries and increase their privilege level within target cloud environments without requiring a login.