Breaking the Microsoft JEA technology to hack a system (Pierluigi Paganini, Security Affairs)

The security researcher Matt Weeks discovered a way to abuse the Microsoft Just Enough Administration (JEA) technology to escalate user profiles.

http://securityaffairs.co/wordpress/52084/hacking/jea-profiles-abuses.html