Vulnerabilitycritical

Microsoft fixes OMIGOD bugs in secret Azure app

The RecordDec 13, 2022 · 00:00 UTC (Dec 13, 2022)3 min read2 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-38647 CVE-2021-38648 CVE-2021-38645 CVE-2021-38649

Tags: cve-2021-38647 cve-2021-38648 cve-2021-38645 cve-2021-38649 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-38647 +3 related CVEs CVE-2021-38648 CVE-2021-38645 CVE-2021-38649	Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI)	9.8 group max	100%	KEVRansomwarePoC	Sep 15, 2021 KEV Nov 3, 2021

From the original article

3 min read at therecord.media

As part of its monthly Patch Tuesday security updates, Microsoft has patched a collection of four vulnerabilities in OMI, a mostly unknown application that the company has been silently installing on most Linux-based Azure virtual machines and related systems.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.