HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-21330

CVSS 7.8v3.1pub. 2024-03-12upd. 2024-12-27

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microsoft Azure Automation

    APP
    Microsoft
    all versions

  • Microsoft Azure Automation Update Management

    APP
    Microsoft
    all versions

  • Microsoft Azure Security Center

    APP
    Microsoft
    all versions

  • Microsoft Azure Sentinel

    APP
    Microsoft
    all versions

  • Microsoft Container Monitoring Solution

    APP
    Microsoft
    all versions

  • Microsoft Log Analytics Agent

    APP
    Microsoft
    all versions

  • Microsoft Operations Management Suite Agent For Linux

    APP
    Microsoft
    < 1.8.1-0

  • Microsoft System Center Operations Manager

    APP
    Microsoft
    20192022
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-38647CRITICAL9.8⚠ KEVsame product

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVE-2025-29827CRITICAL9.9PL ✓same product

Nieprawidłowa autoryzacja w Azure Automation umożliwia privilege escalation

CVE-2024-21334CRITICAL9.8PL ✓same product

RCE w Open Management Infrastructure (OMI) — use-after-free

CVE-2021-38645HIGH7.8⚠ KEVsame product

Open Management Infrastructure Elevation of Privilege Vulnerability

CVE-2021-38648HIGH7.8⚠ KEVsame product

Open Management Infrastructure Elevation of Privilege Vulnerability