Windows Credential Guard Kerberos Change Password Privilege Escalation

Windows Credential guard does not prevent using encrypted Kerberos keys to change a user's password leading to elevation of privilege.

change change password credential escalation guard kerberos password privilege privilege escalation windows