A transit authority's AD CS deployment includes overly permissive certificate templates. How should the tester characterize the issue?
Select an answer to reveal the explanation.
Short Explanation
Certificates are trust tokens. If templates are wide open, you have basically left the badge printer on free mode. Call AD CS template misconfigs what they are — high-impact identity risk — without writing an exploit novella.
Full Explanation
Active Directory Certificate Services template and permission mistakes are widely recognized as high-impact identity risks because certificates can authenticate users or computers. Patching domain controllers does not remove template design flaws. Templates are not limited to printer cosmetics, nor are overly permissive enrollment settings a harmless mailbox requirement. Conceptual reporting of the misconfiguration class is appropriate without ESC-style exploit writeups.