CVE-2021-38648 | Severity.io

Description

Open Management Infrastructure Elevation of Privilege Vulnerability

Related CPE's

azure_automation_state_configuration

Vulnerable

azure_automation_update_management

Vulnerable

azure_diagnostics_\(lad\)

Vulnerable

azure_open_management_infrastructure

Vulnerable

azure_security_center

Vulnerable

Vulnerable

azure_stack_hub

Vulnerable

container_monitoring_solution

Vulnerable

log_analytics_agent

Vulnerable

system_center_operations_manager

Vulnerable

References

http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648

PatchVendor Advisory

http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648

PatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38648

US Government Resource

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-15T12:15:15.147Z

5 years ago

Last modified

2026-06-17T04:02:31.160Z

3 months ago