Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.