Open Management Infrastructure Elevation of Privilege Vulnerability
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Fix
- Fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3, OMS Agent for Linux GA v1.13.40-0, LAD v4.0.13 and LAD v3.0.135, Monitor, Update and Config Mgmnt 1.14.01, publication, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Open Management Infrastructure (OMI) is affected by this vulnerability, which could allow an attacker to gain elevated privileges on a system where the software is running. Successful exploitation would let a user with limited access perform actions reserved for higher-level accounts.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Open Management Infrastructure Elevation of Privilege Vulnerability
Timeline
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CISA remediation deadline
Due date for US federal agencies to patch
- Record last updated
Affected versions
- Microsoft Azure Automation State Configuration, DSC Extension
From 2.0.0 · fixed in DSC Agent versions: 2.71.1.25, 2.70.0.30, 3.0.0.3
- Microsoft Azure Automation Update Management
From 1.0.0 · fixed in OMS Agent for Linux GA v1.13.40-0
- Microsoft Azure Diagnostics (LAD)
From 3.0.0 · fixed in LAD v4.0.13 and LAD v3.0.135
- Microsoft Azure Security Center
From 1.0.0 · fixed in OMS Agent for Linux GA v1.13.40-0
- Microsoft Azure Sentinel
From 1.0.0 · fixed in OMS Agent for Linux GA v1.13.40-0
- Microsoft Azure Stack Hub
From 1.0.0 · fixed in Monitor, Update and Config Mgmnt 1.14.01
- Microsoft Container Monitoring Solution
From 1.0.0 · fixed in publication
- Microsoft Log Analytics Agent
From 1.0.0 · fixed in OMS Agent for Linux GA v1.13.40-0
- Microsoft Open Management Infrastructure
From 16.0 · fixed in OMI Version 1.6.8-1
- Microsoft System Center Operations Manager (SCOM)
From 1.0.0 · fixed in OMI version: 1.6.8-1