AD-ESC7Credential Access

ADCS ESC7 — Vulnerable CA ACL

ManageCA / ManageCertificates rights on the CA allow approving rogue requests.

§ Where this technique fits

AD-ESC7 is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.