Privilege Escalation Using SCIM Provisioning

The article discusses how privilege escalation can be achieved using SCIM provisioning. It mentions the introduction of a new feature called 'Custom role' and explains how it allows admins to create users with custom permissions. By exploiting this feature, a user with limited access to the security section can enable SCIM provisioning and create a user with admin privileges at the identity provider, resulting in full access to the target system.