CVE-2021-38649: high-severity vulnerability in Microsoft Open Management Infrastructure
Open Management Infrastructure Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Open Management Infrastructure allows a local attacker to gain higher privileges on a system. An attacker with basic user access could escalate to administrator-level permissions.
The vulnerability exists in Open Management Infrastructure's privilege escalation mechanism, exploitable by local authenticated users. The attack leverages insufficient access control checks to elevate privileges from standard user to administrative level, requiring prior local system access.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.