medium6.7
CVE-2025-47179
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Impact
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Configuration Manager 2403 | before 5.00.9128.1037 |
| Microsoft | Configuration Manager 2409 | before 5.00.9132.1031 |
| Microsoft | Configuration Manager 2503 | before 5.0.9135.1013 |