The vulnerability allowed users to create administrative accounts and take over a business’ Office 365 implementation.