Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft · Active Directory
Date added (CISA)
2022-08-18
Remediation due
2022-09-08
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.