Credential Access

Vulnerability: Enrollee Supplies Subject (ESC1)
Impact: Malware or attacker with low privileged access in the domain can escalate to the highest privileges and obtain Domain Administrator privilege in less than 10 minutes. i.e., Any single compromise in the environment through existing unpatched vulnerabilities or unprivileged users / vendors with malicious intent can compromise the complete domain.