Описание
Configuration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
FAQ
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by sending specially crafted requests to the affected service interface, allowing them to upload content without the required permissions. By doing so, an authenticated attacker could leverage this unauthorized access to introduce malicious or unintended content into the system, leading to elevated capabilities beyond their intended level.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Configuration Manager 2503 | ||
| Microsoft Configuration Manager 2509 | ||
| Microsoft Configuration Manager 2603 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.8 High
CVSS3
Связанные уязвимости
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
EPSS
8.8 High
CVSS3