Multiple misconfigurations in a service that underpins many Azure features could have allowed an attacker to remotely compromise a cloud users system.