While researching the MSSQL and SCCM permission models to build MSSQLHound and ConfigManBearPig, PowerShell scripts that collect information for the BloodHound attack path management software, I found permissions that allowed elevation of privileges to the MSSQL sysadmin server role and the SCCM Full Administrator security role.
Source originale
specterops.io
CVE-2025-47179: Configuration Manager Elevation of Privilege
· 15 janv.