CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-386497.0/HIGHEPSS 2.9%CISA KEV
2021-09-15

Microsoft Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability (CVE-2021-38649) Security Advisory

[Affected Scope] Linux virtual machines and Azure service environments running Microsoft Open Management Infrastructure (OMI) versions prior to v1.6.8-1

[Impact] A local attacker with low-privileged access can elevate privileges to root, gaining full control over the target system and executing arbitrary code

[Mitigation] Immediately update the OMI package to the latest version (v1.6.8-1 or higher) and verify the auto-update status of associated Azure agents

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse