CVE-2021-38648

No fix known ExploitedEPSS 11%CVSS 7.8

Open Management Infrastructure Elevation of Privilege Vulnerability

Published 2021-09-15 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: Microsoft Azure Automation State Configuration, DSC Extension, Microsoft Azure Automation Update Management, Microsoft Azure Diagnostics (LAD), Microsoft Azure Security Center, Microsoft Azure Sentinel, Microsoft Azure Stack Hub, Microsoft Container Monitoring Solution, Microsoft Log Analytics Agent, Microsoft Open Management Infrastructure, Microsoft System Center Operations Manager (SCOM)