CVE-2024-21330

🗓️ 12 Mar 2024 16:57:56Reported by microsoftType

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerabilit

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure (OMI) extensions for managing virtual machines in Azure allows attackers to escalate their privileges due to lack of access control mechanisms.	18 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-21330	12 Mar 202420:21	–	circl
CNNVD	Microsoft Open Management Infrastructure Security Vulnerability	12 Mar 202400:00	–	cnnvd
Cvelist	CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	12 Mar 202416:57	–	cvelist
EUVD	EUVD-2024-19042	3 Oct 202520:07	–	euvd
Kaspersky	KLA65124 Multiple vulnerabilities in Microsoft System Center	12 Mar 202400:00	–	kaspersky
Kaspersky	KLA65131 Multiple vulnerabilities in Microsoft Azure	12 Mar 202400:00	–	kaspersky
Microsoft CVE	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	12 Mar 202407:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft System Center	12 Mar 202400:00	–	ncsc
NVD	CVE-2024-21330	12 Mar 202417:15	–	nvd

NVD

Vulners

CNA

Node

microsoft azure_automationMatch-

microsoft azure_automation_update_managementMatch-

microsoft azure_security_centerMatch-

microsoft azure_sentinelMatch-

microsoft container_monitoring_solutionMatch-

microsoft log_analytics_agentMatch-

microsoft operations_management_suite_agent_for_linuxRange<1.8.1-0

microsoft system_center_operations_managerMatch2019-

microsoft system_center_operations_managerMatch2022-

[
  {
    "vendor": "Microsoft",
    "product": "System Center Operations Manager (SCOM) 2019",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "10.19.0",
        "lessThan": "10.19.1253.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "System Center Operations Manager (SCOM) 2022",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "10.22.0",
        "lessThan": "10.22.1070.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Automation",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "OMS Agent for Linux GA 1.19.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Automation Update Management",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "OMS Agent for Linux GA v1.19.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Sentinel",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "OMS Agent for Linux GA v1.19.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Container Monitoring Solution",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "microsoft-oms-latest with full ID: sha256:855bfeb0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure HDInsight",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0",
        "lessThan": "omi-1.8.1-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Open Management Infrastructure",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.0",
        "lessThan": "OMI version 1.8.1-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Open Management Infrastructure",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "1.8.1-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Security Center",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "OMS Agent for Linux GA 1.19.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Log Analytics Agent",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "OMS Agent for Linux GA v1.19.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330

03 May 2025 00:46Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.00166

SSVC