A critical vulnerability in Microsoft's Azure Cosmos DB service, which could have granted an attacker full control over any customer database and exposed internal Microsoft systems, has been patched after being discovered by security researchers.