CVE-2021-38645: Open Management Infrastructure Elevation of Privilege Vulnerability

1. In CISA KEVCISA KEV catalogue3 Nov 2021
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

Open Management Infrastructure Elevation of Privilege Vulnerability

• Microsoft · Azure Automation State Configuration, DSC Extensionfrom 2.0.0 before DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3
• Microsoft · Azure Automation Update Managementfrom 1.0.0 before OMS Agent for Linux GA v1.13.40-0
• Microsoft · Azure Diagnostics (LAD)from 3.0.0 before LAD v4.0.13 and LAD v3.0.135
• Microsoft · Azure Security Centerfrom 1.0.0 before OMS Agent for Linux GA v1.13.40-0
• Microsoft · Azure Sentinelfrom 1.0.0 before OMS Agent for Linux GA v1.13.40-0
• Microsoft · Azure Stack Hubfrom 1.0.0 before Monitor, Update and Config Mgmnt 1.14.01
• Microsoft · Container Monitoring Solutionfrom 1.0.0 before publication
• Microsoft · Log Analytics Agentfrom 1.0.0 before OMS Agent for Linux GA v1.13.40-0
• Microsoft · Open Management Infrastructurefrom 16.0 before OMI Version 1.6.8-1
• Microsoft · System Center Operations Manager (SCOM)from 1.0.0 before OMI version: 1.6.8-1

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 3 Nov 2021 · catalogue entry

Public check

No public nuclei template

Vendor

Microsoft

Published

September 2021

Band

Exploited in the wild, September 2021

1. 3 Nov 2021
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Vendor advisorymsrc.microsoft.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com