ESC1 in Active Directory Certificate Services
ESC1 is an Active Directory Certificate Services misconfiguration involving certificate templates. ESC1 exists when a user or computer can request an authentication-capable certificate while supplying identity information that should not be under their control. This matters because certificates can act like credentials. If a certificate can be used for authentication, and a requester can influence […]
ESC1 in Active Directory Certificate Services Read Post »