The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure (OMI) extensions for managing virtual machines in Azure allows attackers to escalate their privileges due to lack of access control mechanisms.

🗓️ 18 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Enterprise management server vulnerability via Internet-based Open Management Infrastructure in Azure enables privilege escalation from weak access control.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2024-21330	12 Mar 202420:21	–	circl
CNNVD	Microsoft Open Management Infrastructure Security Vulnerability	12 Mar 202400:00	–	cnnvd
CVE	CVE-2024-21330	12 Mar 202416:57	–	cve
Cvelist	CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	12 Mar 202416:57	–	cvelist
EUVD	EUVD-2024-19042	3 Oct 202520:07	–	euvd
Kaspersky	KLA65124 Multiple vulnerabilities in Microsoft System Center	12 Mar 202400:00	–	kaspersky
Kaspersky	KLA65131 Multiple vulnerabilities in Microsoft Azure	12 Mar 202400:00	–	kaspersky
Microsoft CVE	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	12 Mar 202407:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft System Center	12 Mar 202400:00	–	ncsc
NVD	CVE-2024-21330	12 Mar 202417:15	–	nvd

Vulners

Node

microsoft azure_security_centerRange<1.19.0

microsoft log_analytics_agentRange<1.19.0

microsoft azure_sentinelRange<1.19.0

microsoft azure_automationRange<1.19.0

microsoft azure_automation_update_managementRange<1.19.0

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330
vuldb	www.vuldb.com/
cybersecurity-help	www.cybersecurity-help.cz/vulnerabilities/87372/
web	www.web.nvd.nist.gov/view/vuln/detail

18 Mar 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

CVSS 37.8

EPSS0.00988