ADCS-ESC1: Misconfigured Certificate Templates Leading to Full Domain Compromise
quality 5/10 · average
0 net
AI Summary
ADCS ESC1 is a critical Active Directory Certificate Services misconfiguration where improperly configured certificate templates allow low-privileged users to request certificates on behalf of domain administrators, enabling full domain compromise through privilege escalation.
Tags
Entities
ADCS
ESC1
Active Directory Certificate Services
Executive Summary
Active Directory Certificate Services (ADCS) ESC1 is a critical misconfiguration that allows attackers with low-privileged domain credentials to escalate to Domain Administrator. This vulnerability exists when certificate templates are improperly configured, allowing users to request certificates on behalf of any domain account, including administrators.