Exploit / PoCcritical

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

The Hacker Newsby @TheHackersNewsSep 17, 2021 · 19:17 UTC (Sep 17, 2021)3 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-38647 CVE-2021-38648 CVE-2021-38645 CVE-2021-38649

Tags: cve-2021-38647 cve-2021-38648 cve-2021-38645 cve-2021-38649 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-38647 +3 related CVEs CVE-2021-38648 CVE-2021-38645 CVE-2021-38649	Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI)	9.8 group max	100%	KEVRansomwarePoC	Sep 15, 2021 KEV Nov 3, 2021

From the original article

3 min read at thehackernews.com

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote takeover of vulnerable systems.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.