7.8
High
CVE-2022-29149 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Description
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Automation State Configuration, DSC Extension 2.0 | 2.0.0 → latest | No fix stated |
| Azure Automation Update Management 1.0 | 1.0.0 → latest | No fix stated |
| Log Analytics Agent 1.0 | 1.0.0 → latest | No fix stated |
| Azure Diagnostics (LAD) 3.0 | 3.0.0 → latest | No fix stated |
| Container Monitoring Solution 1.0 | 1.0.0 → latest | No fix stated |
| Azure Security Center 1.0 | 1.0.0 → latest | No fix stated |
| Azure Sentinel 1.0 | 1.0.0 → latest | No fix stated |
| Azure Stack Hub 1.0 | 1.0.0 → latest | No fix stated |
| Open Management Infrastructure 16.0 | 16.0 → latest | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| System Center Operations Manager (SCOM) 2022 10.22 | 10.22.0 → < 10.22.1024.0 | 10.22.1024.0 |
| System Center Operations Manager (SCOM) 2019 10.19 | 10.19.0 → < 10.19.1152.0 | 10.19.1152.0 |
| System Center Operations Manager (SCOM) 2016 7.6 | 7.6.0 → < 7.6.1108.0 | 7.6.1108.0 |
References
- Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure Automation State Configuration, DSC Extension
The 5 CVEs of Azure Automation State Configuration, DSC Extension →
CVE-2021-38649
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
7.0
High
CVE-2021-38648
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
7.8
High
CVE-2021-38647
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
9.8
Critical
CVE-2021-38645
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
7.8
High