Description
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
E
Physical
RL
O
RC
Changed
Affected products
- Microsoft / Azure Automation State Configuration, DSC Extension2.0.0 – DSC Agent versions: 2.71.1.33, 3.0.0.7
- Microsoft / Azure Automation Update Management1.0.0 – OMS Agent for Linux GA v1.14.13
- Microsoft / Azure Diagnostics (LAD)3.0.0 – LAD v4.0.27 and LAD v3.0.137
- Microsoft / Azure Security Center1.0.0 – OMS Agent for Linux GA v1.14.13
- Microsoft / Azure Sentinel1.0.0 – OMS Agent for Linux GA v1.14.13
- Microsoft / Azure Stack Hub1.0.0 – OMS Agent for Linux GA v1.14.13
- Microsoft / Container Monitoring Solution1.0.0 – publication
- Microsoft / Log Analytics Agent1.0.0 – OMS Agent for Linux GA v1.14.13
- Microsoft / Open Management Infrastructure16.0 – OMI Version 1.6.9-1
- Microsoft / System Center Operations Manager (SCOM) 20167.6.0 – 7.6.1108.0
- Microsoft / System Center Operations Manager (SCOM) 201910.19.0 – 10.19.1152.0
- Microsoft / System Center Operations Manager (SCOM) 202210.22.0 – 10.22.1024.0