Improper Access Control in Microsoft Configuration Manager
CVE-2025-47179

6.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Configuration Manager
Microsoft Configuration Manager 2409
Vendor
CVE Published:
11 November 2025

What is CVE-2025-47179?

An improper access control vulnerability in Microsoft Configuration Manager permits an authorized attacker to elevate privileges locally, potentially leading to unauthorized actions and access within the network. Proper configurations and timely updates are critical to mitigate this risk.

Affected Version(s)

Microsoft Configuration Manager 2409 Unknown 1.0.0 < 5.00.9132.1031

Microsoft Configuration Manager Unknown 1.0.0 < 5.00.9128.1037

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-47179 : Improper Access Control in Microsoft Configuration Manager