Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services allows authorized users to improperly use file and resource names to gain higher privileges on the network. This is dangerous because it lets someone who already has some access take over administrator-level control.

An authenticated attacker can exploit improper validation of resource names in Active Directory Domain Services to escalate privileges across the domain. The vulnerability requires prior network access and valid credentials, but allows elevation from standard user to administrative rights through crafted resource naming.