Bug report- Microsoft Learn has a Bug where Learning certificates issued can be changed with any name

Question

Hi Team,

I would like to report a potential bug related to the training certificates issued on the learning portal. It appears that the certificates generated for completed trainings can be easily altered, allowing anyone to modify the name and produce an unauthorized or fake completion certificate.

I have attached an example showing how Microsoft-issued certificates visible under My Profile can be manipulated simply by changing the displayed name. This seems to be a security flaw, as it enables individuals to generate certificates for trainings they have not actually completed.

Any name can be changed and issue with a Microsoft learning certificate. This can spoil reputation of Microsoft since the learning should be strictly apply to valid user and with genuine name.

Thanks,

RAGHUVEERA

E-mail - ******@alstomgroup.com

Answer 1

Accepted and recommended

Answer 2

Solution for fixing this could be applying proper IAM for learning portal or Certificate print option issued through read only access to mail ID.

Thanks,

RAGHUVEERA