New security posture assessment: Prevent Certificate Enrollment with arbitrary Application Policies (ESC15)
Analysis / inference: Microsoft Defender for Identity adds an ESC15 security posture assessment in Microsoft Secure Score to detect certificate templates vulnerable to CVE-2024-49019.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Defender for Identity released a new security posture assessment within Microsoft Secure Score targeting vulnerable certificate templates caused by unpatched AD CS servers related to CVE-2024-49019.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisDefender for Identity introduces a new posture assessment to identify AD CS certificate templates vulnerable to CVE-2024-49019, directly surfacing ESC15 misconfigurations within Microsoft Secure Score.
Enables SOC and identity teams to proactively surface and report on ESC15 certificate vulnerabilities across the organization.
Section 03 · Recommended actions
- Navigate to Microsoft Secure Score to review the new ESC15 posture recommendation
- Examine flagged AD CS certificate templates and apply required remediation
- Correlate posture findings with existing AD CS-related recommendations and detections
- Review Microsoft Secure Score for the new Prevent Certificate Enrollment with arbitrary Application Policies (ESC15) recommendation
- Check Active Directory Certificate Services (AD CS) templates for arbitrary application policies linked to CVE-2024-49019