Elevation of Privilege Vulnerability Affects Open Management Infrastructure
CVE-2024-21330

7.8HIGH

Key Information:

Vendor

Microsoft
Status
System Center Operations Manager (scom) 2019
System Center Operations Manager (scom) 2022
Azure Automation
Azure Automation Update Management
Vendor
CVE Published:
12 March 2024

What is CVE-2024-21330?

The Open Management Infrastructure (OMI) contains an elevation of privilege vulnerability that can be exploited by an authenticated attacker to gain elevated permissions on the affected system. Successfully exploiting this vulnerability allows the attacker to perform actions with higher privileges, potentially compromising the integrity and availability of the system. Users should ensure that they are running the latest version of OMI to mitigate the risks associated with this vulnerability. For further details, refer to the Microsoft Security Response Center.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Azure Automation Unknown 1.0.0

Azure Automation Update Management Unknown 1.0.0

Azure HDInsight Unknown 1.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.