← CVE Radar
CVE-2021-38645Open Management Infrastructure Elevation of Privilege Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
7.8 HIGHEPSS 2.72%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
| 4.6 | MEDIUM | 2.0NVD | AV:L/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Nov 17, 2021
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-38645
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Sep 15, 2021
- Last modified
- 2026-08-10 20:18 UTC
Affected Products
As published by the CNA in the CVE record.
MicrosoftAzure Automation State Configuration, DSC Extension1 version range
- 2.0.0 before DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3
MicrosoftAzure Automation Update Management1 version range
- 1.0.0 before OMS Agent for Linux GA v1.13.40-0
MicrosoftAzure Diagnostics (LAD)1 version range
- 3.0.0 before LAD v4.0.13 and LAD v3.0.135
MicrosoftAzure Security Center1 version range
- 1.0.0 before OMS Agent for Linux GA v1.13.40-0
MicrosoftAzure Sentinel1 version range
- 1.0.0 before OMS Agent for Linux GA v1.13.40-0
MicrosoftAzure Stack Hub1 version range
- 1.0.0 before Monitor, Update and Config Mgmnt 1.14.01
MicrosoftContainer Monitoring Solution1 version range
- 1.0.0 before publication
MicrosoftLog Analytics Agent1 version range
- 1.0.0 before OMS Agent for Linux GA v1.13.40-0
MicrosoftOpen Management Infrastructure1 version range
- 16.0 before OMI Version 1.6.8-1
MicrosoftSystem Center Operations Manager (SCOM)1 version range
- 1.0.0 before OMI version: 1.6.8-1