hard20 pts · first answer countsidentity-securityadcsprivilege-escalation
A dangerous certificate template
An AD CS certificate template lets Domain Users enroll, has the Client Authentication purpose, needs no manager approval, and lets the requester type any subject name. Why is this critical?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst
- Windows event for a failed logonCybersecurity Analyst
- Event for a locked-out accountCybersecurity Analyst