high7.0Known exploited
CVE-2021-38649
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.
Apply updates per vendor instructions.
Impact
Open Management Infrastructure Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Automation State Configuration | All versions |
| Microsoft | Azure Automation Update Management | All versions |
| Microsoft | Azure Diagnostics \(Lad\) | All versions |
| Microsoft | Azure Open Management Infrastructure | All versions |
| Microsoft | Azure Security Center | All versions |
| Microsoft | Azure Sentinel | All versions |
| Microsoft | Azure Stack Hub | All versions |
| Microsoft | Container Monitoring Solution | All versions |
| Microsoft | Log Analytics Agent | All versions |
| Microsoft | Open Management Infrastructure | before 1.6.8-1 |
| Microsoft | System Center Operations Manager | All versions |