Description
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | System Center Operations Manager (SCOM) 2019 | 10.19.0 – < 10.19.1253.0 | 10.19.1253.0 |
| Microsoft | System Center Operations Manager (SCOM) 2022 | 10.22.0 – < 10.22.1070.0 | 10.22.1070.0 |
| Microsoft | Azure Automation | 1.0.0 – < OMS Agent for Linux GA 1.19.0 | OMS Agent for Linux GA 1.19.0 |
| Microsoft | Azure Automation Update Management | 1.0.0 – < OMS Agent for Linux GA v1.19.0 | OMS Agent for Linux GA v1.19.0 |
| Microsoft | Azure Sentinel | 1.0.0 – < OMS Agent for Linux GA v1.19.0 | OMS Agent for Linux GA v1.19.0 |
| Microsoft | Container Monitoring Solution | 1.0.0 – < microsoft-oms-latest with full ID: sha256:855bfeb0 | microsoft-oms-latest with full ID: sha256:855bfeb0 |
| Microsoft | Azure HDInsight | 1.0 – < omi-1.8.1-0 | omi-1.8.1-0 |
| Microsoft | Open Management Infrastructure | 16.0 – < OMI version 1.8.1-0, 1.0.0 – < 1.8.1-0 | OMI version 1.8.1-0 |
| Microsoft | Azure Security Center | 1.0.0 – < OMS Agent for Linux GA 1.19.0 | OMS Agent for Linux GA 1.19.0 |
| Microsoft | Log Analytics Agent | 1.0.0 – < OMS Agent for Linux GA v1.19.0 | OMS Agent for Linux GA v1.19.0 |
Advisories 3
- WID-SEC-2024-0612 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2024
- MSRC-CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Microsoft Security Response Center · Apr 9, 2024
- WID-SEC-2024-0620 Microsoft System Center: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 12, 2024