The vulnerability of the System Center Operations Manager software for managing and monitoring IT services, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the System Center Operations Manager software for managing and monitoring IT services is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Security Updates for Microsoft System Center Operations Manager (February 2021)

The version of Microsoft System Center Operations Manager installed on the remote Windows host is affected by an elevation of privilege vulnerability. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted request to an affected SCOM instance. C Tenable...

CVE-2021-20335

For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions prior to and including 4.4.12 triggers a bug where Automation thinks SSL is being turned off, and c...

System Center Operations Manager Elevation of Privilege Vulnerability

...

Update for event log channel in System Center Operations Manager 2019 (KB4601269)

None None...

Microsoft System Center Operations Manager Security Feature Issue Vulnerability

Microsoft System Center Operations Manager is a large-scale monitoring and management software for corporate environments from Microsoft. The software, formerly known as MOM Microsoft Operations Manager, is primarily used to monitor IT systems and provide monitoring support for distributed...

PT-2021-2047 · Microsoft · System Center Operations Manager

Name of the Vulnerable Software and Affected Versions: System Center Operations Manager affected versions not specified Description: The issue is related to errors in privilege management. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no...

Vulnerability fixed in Microsoft Malware Protection Engine

Microsoft has fixed a vulnerability in Microsoft System Center Operations Manager. A remote malicious party could potentially exploit the vulnerability potentially exploit it to execute arbitrary code with user privileges or to access gain access to, and manipulate, sensitive information. Microso...

CVE-2020-36166

An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, Storage Foundation HA through 6.1 on Windows, and InfoScale Operations Manager aka VIOM Windows Management Server 7.x through 7.4.2. On start-up, it loads the OpenSSL library from...

PT-2021-11946

Name of the Vulnerable Software and Affected Versions: Veritas InfoScale versions 7.x through 7.4.2 Storage Foundation versions through 6.1 Storage Foundation HA versions through 6.1 InfoScale Operations Manager aka VIOM Windows Management Server versions 7.x through 7.4.2 Description: An issue...

CVE-2020-36166: Undefined Security Weakness

An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, Storage Foundation HA through 6.1 on Windows, and InfoScale Operations Manager aka VIOM Windows Management Server 7.x through 7.4.2. On start-up, it loads the OpenSSL library from...

Multiple Veritas Product Security Vulnerabilities

Veritas Infoscale and others are products of Veritas, Inc.Veritas Infoscale is a highly available virtualized storage software.Veritas Foundation For Windows is a backup, storage management software.Veritas Foundation HA For Veritas Foundation HA For Windows is a backup, storage management...

CVE-2020-5414

VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...

CVE-2020-5414 App Autoscaler logs credentials

VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...

The vulnerability of the System Center Operations Manager software for managing and monitoring IT services, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the System Center Operations Manager software for managing and monitoring IT services relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

Security Updates for Microsoft System Center Operations Manager (June 2020)

The version of Microsoft System Center Operations Manager installed on the remote Windows host is affected by a spoofing vulnerability. An attacker can exploit this vulnerability by sending a specially crafted request to an affected SCOM instance. C Tenable Network Security, Inc...

CVE-2020-1331

A spoofing vulnerability exists when System Center Operations Manager SCOM does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'...

CVE-2020-1331

A spoofing vulnerability exists when System Center Operations Manager SCOM does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'...

CVE-2020-1331

The CVE-2020-1331 entry maps to a spoofing vulnerability in System Center Operations Manager (SCOM), specifically affecting the 2016 Web Console. The issue arises when the web interface fails to properly sanitize specially crafted requests, enabling spoofing and potential cross-site scripting-lik...

PT-2020-2923

Name of the Vulnerable Software and Affected Versions System Center Operations Manager SCOM affected versions not specified Description A spoofing issue exists due to improper sanitization of specially crafted web requests. This could allow a remote attacker to conduct spoofing attacks by bypassi...