CVE-2021-38647

Open Management Infrastructure Remote Code Execution Vulnerability
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:azure_automation_state_configuration:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_automation_update_management:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_diagnostics_\(lad\):-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_open_management_infrastructure:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_security_center:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_sentinel:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:azure_stack_hub:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:container_monitoring_solution:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:log_analytics_agent:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:system_center_operations_manager:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:17

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html - Exploit, Third Party Advisory, VDB Entry
References () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647 - Patch, Vendor Advisory

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-665 CWE-287

Information

Published : 2021-09-15 12:15

Updated : 2024-11-21 06:17


NVD link : CVE-2021-38647

Mitre link : CVE-2021-38647

CVE.ORG link : CVE-2021-38647


JSON object : View

Products Affected

microsoft

  • azure_sentinel
  • log_analytics_agent
  • container_monitoring_solution
  • azure_stack_hub
  • azure_automation_update_management
  • azure_open_management_infrastructure
  • system_center_operations_manager
  • azure_automation_state_configuration
  • azure_diagnostics_\(lad\)
  • azure_security_center
CWE
CWE-287

Improper Authentication