CVE-2023-36899: ASP.NET Elevation of Privilege Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

The target environment could be accidentally configured to allow the vulnerability.