Security
Headlines
HeadlinesLatestCVEs

Tag

#Open Management Infrastructure

CVE-2024-21330: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

**What privileges could be gained by an attacker who successfully exploited this vulnerability?** Successful exploitation of this vulnerability will locally elevate the attacker's privileges to communicate as Root with OMI server.

Microsoft Security Response Center
#vulnerability#Open Management Infrastructure#Security Vulnerability
CVE-2024-21334: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

**How could an attacker exploit this vulnerability?** A remote unauthenticated attacker could access the OMI instance from the Internet and send specially crafted requests to trigger a use-after-free vulnerability.

CVE-2023-36043: Open Management Infrastructure Information Disclosure Vulnerability

**According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?** An attacker who successfully exploits this vulnerability could affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component could be different from the impacted component and are managed by different security authorities.