7.8
CVE-2021-38645
- EPSS 24.64%
- Published 15.09.2021 12:15:14
- Last modified 07.03.2025 17:12:53
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
Open Management Infrastructure Elevation of Privilege Vulnerability
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Azure Automation State Configuration Version-
Microsoft ≫ Azure Automation Update Management Version-
Microsoft ≫ Azure Diagnostics (lad) Version-
Microsoft ≫ Azure Open Management Infrastructure Version-
Microsoft ≫ Azure Security Center Version-
Microsoft ≫ Azure Sentinel Version-
Microsoft ≫ Azure Stack Hub Version-
Microsoft ≫ Container Monitoring Solution Version-
Microsoft ≫ Log Analytics Agent Version-
Microsoft ≫ System Center Operations Manager Version-
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 24.64% | 0.959 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| secure@microsoft.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|