Merge pull request #26 from bchurchill/main

Fix for issue #25
GhostPack · Jan 27, 2023 · fb297ad · fb297ad
2 parents 48ef2b4 + a0315df
commit fb297ad
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Certify/Commands/Find.cs b/Certify/Commands/Find.cs
@@ -736,7 +736,7 @@ private bool IsCertificateTemplateVulnerable(CertificateTemplate template, List<
                 || !template.ExtendedKeyUsage.Any() // No EKUs == Any Purpose
                 || template.ExtendedKeyUsage.Contains(CommonOids.AnyPurpose)
                 || template.ExtendedKeyUsage.Contains(CommonOids.CertificateRequestAgent)
-                || template.ApplicationPolicies.Contains(CommonOids.CertificateRequestAgentPolicy);
+                || (template.ApplicationPolicies != null && template.ApplicationPolicies.Contains(CommonOids.CertificateRequestAgentPolicy));
 
             if (lowPrivilegedUsersCanEnroll && hasDangerousEku) return true;