Vulnerability Details CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.495
EPSS Ranking 97.7%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
Proposed Action
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Ransomware Campaign
Unknown
References
- http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648
- http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38648
Products affected by CVE-2021-38648
-
cpe:2.3:a:microsoft:azure_automation_state_configuration:-
-
cpe:2.3:a:microsoft:azure_automation_update_management:-
-
cpe:2.3:a:microsoft:azure_diagnostics_(lad):-
-
cpe:2.3:a:microsoft:azure_open_management_infrastructure:-
-
cpe:2.3:a:microsoft:azure_security_center:-
-
cpe:2.3:a:microsoft:azure_sentinel:-
-
cpe:2.3:a:microsoft:azure_stack_hub:-
-
cpe:2.3:a:microsoft:container_monitoring_solution:-
-
cpe:2.3:a:microsoft:log_analytics_agent:-
-
cpe:2.3:a:microsoft:system_center_operations_manager:-