Vulnerability Details CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.259
EPSS Ranking 96.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
Proposed Action
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Ransomware Campaign
Unknown
References
- http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648
- http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648
Products affected by CVE-2021-38648
-
cpe:2.3:a:microsoft:azure_automation_state_configuration:-
-
cpe:2.3:a:microsoft:azure_automation_update_management:-
-
cpe:2.3:a:microsoft:azure_diagnostics_(lad):-
-
cpe:2.3:a:microsoft:azure_open_management_infrastructure:-
-
cpe:2.3:a:microsoft:azure_security_center:-
-
cpe:2.3:a:microsoft:azure_sentinel:-
-
cpe:2.3:a:microsoft:azure_stack_hub:-
-
cpe:2.3:a:microsoft:container_monitoring_solution:-
-
cpe:2.3:a:microsoft:log_analytics_agent:-
-
cpe:2.3:a:microsoft:system_center_operations_manager:-