Riskcovery

CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

State
Published
Severity
7.8 High
Published
Jun 15, 2022
Updated
Jan 2, 2025
Reserved
Apr 12, 2022

Read the record on cve.org

Description

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Azure Automation State Configuration, DSC ExtensionMicrosoft
  • 2.0.0 to before DSC Agent versions: 2.71.1.33, 3.0.0.7Affected
Azure Automation Update ManagementMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.14.13Affected
Log Analytics AgentMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.14.13Affected
Azure Diagnostics (LAD)Microsoft
  • 3.0.0 to before LAD v4.0.27 and LAD v3.0.137Affected
Container Monitoring SolutionMicrosoft
  • 1.0.0 to before publicationAffected
Azure Security CenterMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.14.13Affected
Azure SentinelMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.14.13Affected
Azure Stack HubMicrosoft
  • 1.0.0 to before OMS Agent for Linux GA v1.14.13Affected
Open Management InfrastructureMicrosoft
  • 16.0 to before OMI Version 1.6.9-1Affected
System Center Operations Manager (SCOM) 2022Microsoft
  • 10.22.0 to before 10.22.1024.0Affected
System Center Operations Manager (SCOM) 2019Microsoft
  • 10.19.0 to before 10.19.1152.0Affected
System Center Operations Manager (SCOM) 2016Microsoft
  • 7.6.0 to before 7.6.1108.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.