Description
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Azure Automation State Configuration, DSC Extension | Microsoft / Azure Automation State Configuration, DSC Extension | >= 2.0.0, < DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3 | affected |
| Azure Automation Update Management | Microsoft / Azure Automation Update Management | >= 1.0.0, < OMS Agent for Linux GA v1.13.40-0 | affected |
| Azure Diagnostics (LAD) | Microsoft / Azure Diagnostics (LAD) | >= 3.0.0, < LAD v4.0.13 and LAD v3.0.135 | affected |
| Azure Security Center | Microsoft / Azure Security Center | >= 1.0.0, < OMS Agent for Linux GA v1.13.40-0 | affected |
| Azure Sentinel | Microsoft / Azure Sentinel | >= 1.0.0, < OMS Agent for Linux GA v1.13.40-0 | affected |
| Azure Stack Hub | Microsoft / Azure Stack Hub | >= 1.0.0, < Monitor, Update and Config Mgmnt 1.14.01 | affected |
| Container Monitoring Solution | Microsoft / Container Monitoring Solution | >= 1.0.0, < publication | affected |
| Log Analytics Agent | Microsoft / Log Analytics Agent | >= 1.0.0, < OMS Agent for Linux GA v1.13.40-0 | affected |
| Open Management Infrastructure | Microsoft / Open Management Infrastructure | >= 16.0, < OMI Version 1.6.8-1 | affected |
| System Center Operations Manager (SCOM) | Microsoft / System Center Operations Manager (SCOM) | >= 1.0.0, < OMI version: 1.6.8-1 | affected |