Andreas Wolter • 10/30/2018

Privilege Escalation to sysadmin via Trustworthy Database setting

This technical blog post details a SQL Server security vulnerability where the 'Trustworthy' database setting, combined with a high-privilege database owner and certain user permissions, can enable an attacker to escalate privileges to sysadmin. It is a warning for administrators and developers, explaining the prerequisites and attack vector, which remains relevant despite being known for years.

0 comments

#privilege escalation #Sysadmin #Database Security