Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HMicrosoft System Center Operations Manager
APPMicrosoft201920222025
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Powiązane podatności
CVE-2021-38647CRITICAL9.8⚠ KEVten sam produkt
Open Management Infrastructure Remote Code Execution Vulnerability
CVE-2024-21334CRITICAL9.8PL ✓ten sam produkt
RCE w Open Management Infrastructure (OMI) — use-after-free
CVE-2021-38645HIGH7.8⚠ KEVten sam produkt
Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648HIGH7.8⚠ KEVten sam produkt
Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38649HIGH7.0⚠ KEVten sam produkt
Open Management Infrastructure Elevation of Privilege Vulnerability