Microsoft issues warning about Active Directory privilege escalation attack

guest · Dec 21, 2021

December 21, 2021

Although Microsoft releases quality and security updates for its supported software on a regular basis, as a consumer, it's also important to apply them as soon as possible. Today, the company has issued an advisory about some vulnerabilities that it has already patched but are now being exploited on configurations that have not been updated yet.

Back in November, Microsoft tagged two vulnerabilities as CVE-2021-42287 and CVE-2021-42278 describing them as "Windows Active Directory domain service privilege escalation vulnerability". The issues in question allow a malicious actor to easily gain Domain Admin privileges in Active Directory after they compromise a regular user account.
Microsoft released three patches for immediate deployment on domain controllers [...]
Click to expand...

Although the aforementioned patches have been available for weeks, the problem is that a proof-of-concept tool that exploits these vulnerabilities was publicly disclosed on December 12. Malicious actors can utilize it to perform privilege escalation attacks on Active Directory by targeting unpatched domain controllers.
Click to expand...

You can check out more details here.
Click to expand...

Log in or Sign up

Microsoft issues warning about Active Directory privilege escalation attack

guest Guest

Log in or Sign up

Microsoft issues warning about Active Directory privilege escalation attack

guest Guest

Useful Searches