CVE-2024-24409

This writeup describes an elevation of privilege vulnerability in ManageEngine ADManager Plus Build < 7210, where a technician with the Modify Computers role can abuse the userAccountControl and msDS-AllowedToDelegateTo attributes to set Constrained or Unconstrained Kerberos Delegation, leading to privilege escalation from Domain User to Domain Admin.

The repository provides a detailed technical analysis of CVE-2024-24409, an elevation of privilege vulnerability in ADManager Plus Build < 7210. It explains how the Modify Computers role can be abused to set Constrained Kerberos Delegation, leading to privilege escalation from Domain User to Domain Admin.