CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-15
Microsoft Open Management Infrastructure (OMI) Privilege Escalation and Authentication Bypass (CVE-2021-38648)
[Affected Scope] Microsoft Open Management Infrastructure (OMI) versions prior to 1.6.8-1, commonly deployed in Azure Linux environments
[Impact] Remote or local attackers can bypass authentication to execute arbitrary commands with root privileges, leading to full system compromise
[Mitigation] Immediately upgrade OMI to version 1.6.8-1 or higher, and restrict access to OMI ports (5985, 5986)