A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company