CVE-2024-24409
HIGHManageEngine ADManager Plus <= 7203 - Privilege Escalation via Modify Computers Option
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-24409. PoCs published by Metin Yunus Kandemir, passtheticket.
AI-analyzed exploit summary This writeup describes an elevation of privilege vulnerability in ManageEngine ADManager Plus Build < 7210, where a technician with the Modify Computers role can abuse the userAccountControl and msDS-AllowedToDelegateTo attributes to set Constrained or Unconstrained Kerberos Delegation, leading to privilege escalation from Domain User to Domain Admin.
Description
Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.
Exploits (2)
This writeup describes an elevation of privilege vulnerability in ManageEngine ADManager Plus Build < 7210, where a technician with the Modify Computers role can abuse the userAccountControl and msDS-AllowedToDelegateTo attributes to set Constrained or Unconstrained Kerberos Delegation, leading to privilege escalation from Domain User to Domain Admin.
The repository provides a detailed technical analysis of CVE-2024-24409, an elevation of privilege vulnerability in ADManager Plus Build < 7210. It explains how the Modify Computers role can be abused to set Constrained Kerberos Delegation, leading to privilege escalation from Domain User to Domain Admin.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H