Riskcovery

CVE-2021-38648

Open Management Infrastructure Elevation of Privilege Vulnerability

State
Published
Severity
7.8 High
Published
Sep 15, 2021
Updated
Aug 10, 2026
Reserved
Aug 13, 2021

Read the record on cve.org

Description

Open Management Infrastructure Elevation of Privilege Vulnerability

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Azure Automation State Configuration, DSC ExtensionMicrosoft
  • 2.0.0 to before DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3Affected
Azure Automation Update ManagementMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.13.40-0Affected
Azure Diagnostics (LAD)Microsoft
  • 3.0.0 to before LAD v4.0.13 and LAD v3.0.135Affected
Azure Security CenterMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.13.40-0Affected
Azure SentinelMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.13.40-0Affected
Azure Stack HubMicrosoft
  • 1.0.0 to before Monitor, Update and Config Mgmnt 1.14.01Affected
Container Monitoring SolutionMicrosoft
  • 1.0.0 to before publicationAffected
Log Analytics AgentMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.13.40-0Affected
Open Management InfrastructureMicrosoft
  • 16.0 to before OMI Version 1.6.8-1Affected
System Center Operations Manager (SCOM)Microsoft
  • 1.0.0 to before OMI version: 1.6.8-1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.