CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
- Published Sep 15, 2021
- CVSS 7.8 high
- 11.4% chance of exploitation in the next 30 days (EPSS)
- In CISA's Known Exploited Vulnerabilities catalog
- A Metasploit module exploits it
- A fix is available
Affected software
- Microsoft Azure Automation State Configuration DSC Extension
- Microsoft Azure Automation Update Management
- Microsoft Azure Diagnostics
- Microsoft Azure Security Center
- Microsoft Azure Sentinel
- Microsoft Azure Stack Hub
- Microsoft Container Monitoring Solution
- Microsoft Log Analytics Agent
- Microsoft Open Management Infrastructure
- Microsoft System Center Operations Manager