Curated security research, vulnerabilities, advisories and tools for practitioners.

SCOMmand and Conquer – Attacking System Center Operations Manager (Part 1)

Summary

SCOM suffers from similar insecure default configurations as its SCCM counterpart, enabling attackers to escalate privileges, harvest credentials, and ultimately compromise the entire management group and its monitored infrastructure.
Published
Collected