7.8Alta
KEV
CVE-2021-38645Open Management Infrastructure Elevation of Privilege Vulnerability
Explotación conocida — Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CISA confirmó el 03.11.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 17.11.2021.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-38645
Descripción
Open Management Infrastructure Elevation of Privilege Vulnerability
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | azure automation state configuration | 2.0.0 – < DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3 | |
| Microsoft | Azure Automation State Configuration, DSC Extension | 2.0.0 – < DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3 | |
| Microsoft | Azure Automation Update Management | 1.0.0 – < OMS Agent for Linux GA v1.13.40-0 | |
| microsoft | azure diagnostics | 3.0.0 – < LAD v4.0.13 and LAD v3.0.135 | |
| Microsoft | Azure Diagnostics (LAD) | 3.0.0 – < LAD v4.0.13 and LAD v3.0.135 | |
| Microsoft | Azure Security Center | 1.0.0 – < OMS Agent for Linux GA v1.13.40-0 | |
| Microsoft | Azure Sentinel | 1.0.0 – < OMS Agent for Linux GA v1.13.40-0 | |
| Microsoft | Azure Stack Hub | 1.0.0 – < Monitor, Update and Config Mgmnt 1.14.01 | |
| Microsoft | Container Monitoring Solution | 1.0.0 – < publication | |
| Microsoft | Log Analytics Agent | 1.0.0 – < OMS Agent for Linux GA v1.13.40-0 | |
| Microsoft | Open Management Infrastructure | 16.0 – < OMI Version 1.6.8-1 | |
| microsoft | system center operations manager | 1.0.0 – < OMI version: 1.6.8-1 | |
| Microsoft | System Center Operations Manager (SCOM) | 1.0.0 – < OMI version: 1.6.8-1 |
Referencias y parches
- Open Management Infrastructure Elevation of Privilege Vulnerability vendor-advisorypatchPatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645 PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645 US Government Resource
Coincidencias CPE (NVD) (10)
cpe:2.3:a:microsoft:azure_automation_state_configuration:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:azure_automation_update_management:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:azure_diagnostics_\(lad\):-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:azure_security_center:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:azure_sentinel:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:azure_stack_hub:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:container_monitoring_solution:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:log_analytics_agent:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:open_management_infrastructure:*:*:*:*:*:*:*:*< 1.6.8-1cpe:2.3:a:microsoft:system_center_operations_manager:-:*:*:*:*:*:*:*