CVE-2021-38649

HIGH CVSS: 7.0 Published: 2021-09-15 Modified: 2026-08-10

Description

Open Management Infrastructure Elevation of Privilege Vulnerability

Affected Platforms

Microsoft System Center Operations ManagerMicrosoft Log Analytics AgentMicrosoft Azure SentinelMicrosoft Azure Automation State ConfigurationMicrosoft Azure Automation Update ManagementMicrosoft Container Monitoring SolutionMicrosoft Open Management InfrastructureMicrosoft Azure Open Management InfrastructureMicrosoft Azure Security CenterMicrosoft Azure Diagnostics \(Lad\)

Weakness Type

NVD-CWE-noinfo

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38649
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-3864…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-…