CVE-2021-38648

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score26.8460%

EPSS Percentile93.53th

Published2021年9月15日

Last Modified2025年10月30日

Vulnerability Description

Open Management Infrastructure Elevation of Privilege Vulnerability

Affected Platforms (CPE)

📦

Microsoft

Azure Automation State Configuration

All versions

📦

Microsoft

Azure Automation Update Management

All versions

📦

Microsoft

Azure Diagnostics \(lad\)

All versions

📦

Microsoft

Azure Open Management Infrastructure

All versions

📦

Microsoft

Azure Security Center

All versions

📦

Microsoft

Azure Sentinel

All versions

📦

Microsoft

Azure Stack Hub

All versions

📦

Microsoft

Container Monitoring Solution

All versions

📦

Microsoft

Log Analytics Agent

All versions

📦

Microsoft

System Center Operations Manager

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648

🔗 http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38648

Vulnerability Description

Affected Platforms (CPE)

Azure Automation State Configuration

Azure Automation Update Management

Azure Diagnostics \(lad\)

Azure Open Management Infrastructure

Azure Security Center

Azure Sentinel

Azure Stack Hub

Container Monitoring Solution

Log Analytics Agent

System Center Operations Manager

References & Advisories

関連する脆弱性情報