7.8
CVE-2021-38649
- EPSS 19.87%
- Veröffentlicht 15.09.2021 12:15:15
- Zuletzt bearbeitet 07.03.2025 21:54:07
- Quelle secure@microsoft.com
- Teams Watchlist Login
- Unerledigt Login
Open Management Infrastructure Elevation of Privilege Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Azure Automation State Configuration Version-
Microsoft ≫ Azure Automation Update Management Version-
Microsoft ≫ Azure Diagnostics (lad) Version-
Microsoft ≫ Azure Open Management Infrastructure Version-
Microsoft ≫ Azure Security Center Version-
Microsoft ≫ Azure Sentinel Version-
Microsoft ≫ Azure Stack Hub Version-
Microsoft ≫ Container Monitoring Solution Version-
Microsoft ≫ Log Analytics Agent Version-
Microsoft ≫ System Center Operations Manager Version-
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
SchwachstelleMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
BeschreibungApply updates per vendor instructions.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 19.87% | 0.952 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| secure@microsoft.com | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|