CVE-2024-21330: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Published Mar 12, 2024
·Updated
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Affected Software
20 affected componentsFixes available
Microsoft Container Monitoring Solution
Microsoft Azure Automation
Microsoft Log Analytics Agent
Microsoft Azure Security Center
Microsoft Azure HDInsight
Microsoft Azure Automation Update Management
Microsoft Operations Management Suite Agent for Linux (OMS)
Microsoft Open Management Infrastructure
Microsoft Azure Automation
Microsoft Azure Automation Update Management
Microsoft Azure Security Center
Microsoft Azure Sentinel
Microsoft Container Monitoring Solution
Microsoft Log Analytics Agent
Microsoft Operations Management Suite Agent For Linux<1.8.1-0
Microsoft System Center Operations Manager=2019
Microsoft System Center Operations Manager=2022
Microsoft Azure Sentinel
Microsoft System Center Operations Manager (SCOM) 2022
Microsoft System Center Operations Manager (SCOM) 2019
Event History
Mar 12, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-21330?
CVE-2024-21330 is classified as an Elevation of Privilege vulnerability.
2
How do I fix CVE-2024-21330?
To fix CVE-2024-21330, you should apply the latest security patches provided by Microsoft for the affected products.
3
Which products are affected by CVE-2024-21330?
CVE-2024-21330 affects multiple Microsoft products including System Center Operations Manager, Azure Automation, and Open Management Infrastructure.
4
Can CVE-2024-21330 be exploited remotely?
Yes, CVE-2024-21330 can potentially be exploited remotely, allowing unauthorized users to gain elevated privileges.
5
Is a patch available for CVE-2024-21330?
Yes, patches for CVE-2024-21330 are available through the Microsoft Update Catalog.