{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Wei in Kunlun Lab with \u003ca href=\"https://www.cyberkl.com/\"\u003eCyber KunLun\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
      },
      {
        "category": "self",
        "summary": "CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21330.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability",
    "tracking": {
      "current_release_date": "2024-04-09T07:00:00.000Z",
      "generator": {
        "date": "2025-05-03T00:46:37.526Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-21330",
      "initial_release_date": "2024-03-12T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-03-12T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2024-04-09T07:00:00.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "In the Security Updates table, added Azure HDInsights because this product is also affected by this vulnerability. Microsoft strongly recommends that customers running Azure HDInsights install the updates to be fully protected from the vulnerability."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.19.1253.0",
            "product": {
              "name": "System Center Operations Manager (SCOM) 2019 \u003c10.19.1253.0",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.19.1253.0",
            "product": {
              "name": "System Center Operations Manager (SCOM) 2019 10.19.1253.0",
              "product_id": "12057"
            }
          }
        ],
        "category": "product_name",
        "name": "System Center Operations Manager (SCOM) 2019"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.22.1070.0",
            "product": {
              "name": "System Center Operations Manager (SCOM) 2022 \u003c10.22.1070.0",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.22.1070.0",
            "product": {
              "name": "System Center Operations Manager (SCOM) 2022 10.22.1070.0",
              "product_id": "12058"
            }
          }
        ],
        "category": "product_name",
        "name": "System Center Operations Manager (SCOM) 2022"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMS Agent for Linux GA 1.19.0",
            "product": {
              "name": "Azure Automation \u003cOMS Agent for Linux GA 1.19.0",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "OMS Agent for Linux GA 1.19.0",
            "product": {
              "name": "Azure Automation OMS Agent for Linux GA 1.19.0",
              "product_id": "11656"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Automation"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Azure Automation Update Management \u003cOMS Agent for Linux GA v1.19.0",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "OMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Azure Automation Update Management OMS Agent for Linux GA v1.19.0",
              "product_id": "11944"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Automation Update Management"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Azure Sentinel \u003cOMS Agent for Linux GA v1.19.0",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "OMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Azure Sentinel OMS Agent for Linux GA v1.19.0",
              "product_id": "11949"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Sentinel"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cmicrosoft-oms-latest with full ID: sha256:855bfeb0",
            "product": {
              "name": "Container Monitoring Solution \u003cmicrosoft-oms-latest with full ID: sha256:855bfeb0",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "microsoft-oms-latest with full ID: sha256:855bfeb0",
            "product": {
              "name": "Container Monitoring Solution microsoft-oms-latest with full ID: sha256:855bfeb0",
              "product_id": "11947"
            }
          }
        ],
        "category": "product_name",
        "name": "Container Monitoring Solution"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003comi-1.8.1-0",
            "product": {
              "name": "Azure HDInsight \u003comi-1.8.1-0",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "omi-1.8.1-0",
            "product": {
              "name": "Azure HDInsight omi-1.8.1-0",
              "product_id": "11987"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure HDInsight"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMI version 1.8.1-0",
            "product": {
              "name": "Open Management Infrastructure \u003cOMI version 1.8.1-0",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "OMI version 1.8.1-0",
            "product": {
              "name": "Open Management Infrastructure OMI version 1.8.1-0",
              "product_id": "11933"
            }
          }
        ],
        "category": "product_name",
        "name": "Open Management Infrastructure"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c1.8.1-0",
            "product": {
              "name": "Operations Management Suite Agent for Linux (OMS) \u003c1.8.1-0",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "1.8.1-0",
            "product": {
              "name": "Operations Management Suite Agent for Linux (OMS) 1.8.1-0",
              "product_id": "12295"
            }
          }
        ],
        "category": "product_name",
        "name": "Operations Management Suite Agent for Linux (OMS)"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMS Agent for Linux GA 1.19.0",
            "product": {
              "name": "Azure Security Center \u003cOMS Agent for Linux GA 1.19.0",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "OMS Agent for Linux GA 1.19.0",
            "product": {
              "name": "Azure Security Center OMS Agent for Linux GA 1.19.0",
              "product_id": "11948"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Security Center"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003cOMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Log Analytics Agent \u003cOMS Agent for Linux GA v1.19.0",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "OMS Agent for Linux GA v1.19.0",
            "product": {
              "name": "Log Analytics Agent OMS Agent for Linux GA v1.19.0",
              "product_id": "11945"
            }
          }
        ],
        "category": "product_name",
        "name": "Log Analytics Agent"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21330",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "Successful exploitation of this vulnerability will locally elevate the attacker\u0027s privileges to communicate as Root with OMI server.",
          "title": "What privileges could be gained by an attacker who successfully exploited this vulnerability?"
        },
        {
          "category": "faq",
          "text": "Successful exploitation of this vulnerability requires an attacker be an authenticated user on the resource to access the necessary socket files to control the OMI service.",
          "title": "According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "Customers running affected versions of SCOM (System Center Operations Manager) should update to OMI version 1.8.1-0.",
          "title": "What actions do I need to take to be protected from this vulnerability?"
        },
        {
          "category": "faq",
          "text": "Open Management Infrastructure (OMI) is an open-source Web-Based Enterprise Management (WBEM) implementation for managing Linux and UNIX systems. SCOM uses this framework to orchestrate configuration management and log collection on Linux VMs.\nMore information can be found here: GitHub - Open Management Infrastructure.",
          "title": "What is OMI?"
        },
        {
          "category": "faq",
          "text": "The following table lists the affected services and the required customer action to protect against this vulnerability.\nOMI as standalone package: OMI as standalone package, OMI version v1.8.1-0: OMI version v1.8.1-0, Manually download the update here: Manually download the update here, System Center Operations Manager (SCOM) Management Pack for UNIX and Linux Operating Systems: System Center Operations Manager (SCOM) Management Pack for UNIX and Linux Operating Systems, Management Pack for SCOM 2019: 10.19.1253.0: Management Pack for SCOM 2019: 10.19.1253.0, Manually download and update the applicable management packs: \u202f2019, or\u202f2022.: Manually download and update the applicable management packs: \u202f2019, or\u202f2022., : , Management Pack for SCOM 2022: 10.22.1070.0: Management Pack for SCOM 2022: 10.22.1070.0, : , Log Analytics Agent: Log Analytics Agent, OMS Agent for Linux GA v1.19.0: OMS Agent for Linux GA v1.19.0, Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here.: Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here., Azure Security Center: Azure Security Center, OMS Agent for Linux GA v1.19.0: OMS Agent for Linux GA v1.19.0, Manually download and update the OMS shell bundle using instructions here OR  through Azure Powershell or Azure CLI using the instructions here.: Manually download and update the OMS shell bundle using instructions here OR  through Azure Powershell or Azure CLI using the instructions here., Container Monitoring Solution: Container Monitoring Solution, Image tag: microsoft-oms-latest with full ID: sha256:855bfeb0599e1e1d954ab8660808cc24bb190a4447818cd3fa8ad89bdad88df4: Image tag: microsoft-oms-latest with full ID: sha256:855bfeb0599e1e1d954ab8660808cc24bb190a4447818cd3fa8ad89bdad88df4, Manually update the OMS-docker image using instructions here.: Manually update the OMS-docker image using instructions here., Azure Sentinel: Azure Sentinel, OMS Agent for Linux GA v1.19.0: OMS Agent for Linux GA v1.19.0, Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here.: Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here., Azure Automation: Azure Automation, OMS Agent for Linux GA v1.19.0: OMS Agent for Linux GA v1.19.0, Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here.: Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here., Azure Automation Update Management: Azure Automation Update Management, OMS Agent for Linux GA v1.19.0: OMS Agent for Linux GA v1.19.0, Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here.: Manually download and update the OMS shell bundle using instructions here OR through Azure Powershell or Azure CLI using the instructions here.",
          "title": "What products are affected by this vulnerability and how can I protect myself?"
        }
      ],
      "product_status": {
        "fixed": [
          "11656",
          "11933",
          "11944",
          "11945",
          "11947",
          "11948",
          "11949",
          "11987",
          "12057",
          "12058",
          "12295"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
        },
        {
          "category": "self",
          "summary": "CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21330.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "10.19.1253.0:Security Update:https://www.microsoft.com/en-us/download/details.aspx?id=58208",
          "product_ids": [
            "3"
          ],
          "url": "https://www.microsoft.com/en-us/download/details.aspx?id=58208"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "10.22.1070.0:Security Update:https://www.microsoft.com/en-in/download/details.aspx?id=104213",
          "product_ids": [
            "2"
          ],
          "url": "https://www.microsoft.com/en-in/download/details.aspx?id=104213"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "OMS Agent for Linux GA 1.19.0:Security Update:https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/oms-linux#azure-cli-deployment",
          "product_ids": [
            "11",
            "6"
          ],
          "url": "https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/oms-linux#azure-cli-deployment"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "OMS Agent for Linux GA v1.19.0:Security Update:https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/oms-linux#azure-cli-deployment",
          "product_ids": [
            "9",
            "5"
          ],
          "url": "https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/oms-linux#azure-cli-deployment"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "microsoft-oms-latest with full ID: sha256:855bfeb0:Security Update:https://github.com/microsoft/containerregistry",
          "product_ids": [
            "7"
          ],
          "url": "https://github.com/microsoft/containerregistry"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "omi-1.8.1-0:Security Update:https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes",
          "product_ids": [
            "4"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "OMI version 1.8.1-0:Security Update:https://github.com/microsoft/omi",
          "product_ids": [
            "10"
          ],
          "url": "https://github.com/microsoft/omi"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "1.8.1-0:Security Update:https://github.com/microsoft/OMS-Agent-for-Linux",
          "product_ids": [
            "1"
          ],
          "url": "https://github.com/microsoft/OMS-Agent-for-Linux"
        },
        {
          "category": "vendor_fix",
          "date": "2024-03-12T07:00:00.000Z",
          "details": "OMS Agent for Linux GA v1.19.0:Security Update:https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview#azure-cli-deployment",
          "product_ids": [
            "8"
          ],
          "url": "https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview#azure-cli-deployment"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 7.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Elevation of Privilege"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:azure_automation:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D341E199-250C-47C7-ABE8-39973A5C63E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:azure_automation_update_management:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23A8B342-E863-4C71-9CE1-FB325FF34829",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:azure_security_center:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA1626DA-5B19-4291-B840-633EF458984C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:azure_sentinel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B80F8C3B-BEF9-43D5-9455-6C6F608CF519",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:container_monitoring_solution:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "68A461E8-C834-4F97-98E3-516A191A3BAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:log_analytics_agent:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDAE892B-324C-45E3-BFA0-C2B7B6939F54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:operations_management_suite_agent_for_linux:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1B6D6F4-F48C-482B-B54B-6962D6D506A9",
              "versionEndExcluding": "1.8.1-0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "0BFD64D6-E8BB-4606-8D4C-EAE586CAD791",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "ABD632BE-513E-4581-9C8C-3A13DA1ADF1F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": "Infraestructura de gesti\u00f3n abierta (OMI) Vulnerabilidad de elevaci\u00f3n de privilegios"
    }
  ],
  "id": "CVE-2024-21330",
  "lastModified": "2024-12-27T17:07:41.530",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2024-03-12T17:15:49.143",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Software pour Open Networking in the Cloud (SONiC) 202205 versions ant\u00e9rieures \u00e0 20220531.26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.9 versions ant\u00e9rieures \u00e0 17.9.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Log Analytics Agent versions ant\u00e9rieures \u00e0 OMS Agent for Linux GA v1.19.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Open Management Infrastructure versions ant\u00e9rieures \u00e0 OMI version 1.8.1-0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.4 versions ant\u00e9rieures \u00e0 17.4.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.87.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Skype pour Consumer versions ant\u00e9rieures \u00e0 8.113",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Teams pour Android versions ant\u00e9rieures \u00e0 1.0.0.2024022302",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "System Center Operations Manager (SCOM) 2022 versions ant\u00e9rieures \u00e0 10.22.1070.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.17328.20136",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Container Monitoring Solution versions ant\u00e9rieures \u00e0 microsoft-oms-latest with full ID: sha256:855bfeb0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Software pour Open Networking in the Cloud (SONiC) 201911 versions ant\u00e9rieures \u00e0 20191130.89",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 13 versions ant\u00e9rieures \u00e0 15.02.1258.032",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "System Center Operations Manager (SCOM) 2019 versions ant\u00e9rieures \u00e0 10.19.1253.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Intune Company Portal pour Android versions ant\u00e9rieures \u00e0 2402",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 9.1 versions ant\u00e9rieures \u00e0 9.1.26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Operations Management Suite Agent pour Linux (OMS) versions ant\u00e9rieures \u00e0 1.8.1-0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10408.20000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Software pour Open Networking in the Cloud (SONiC) 202012 versions ant\u00e9rieures \u00e0 20201231.96",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Software pour Open Networking in the Cloud (SONiC) 201811 versions ant\u00e9rieures \u00e0 20181130.106",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.6 versions ant\u00e9rieures \u00e0 17.6.13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5439.1000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.037",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.8 versions ant\u00e9rieures \u00e0 17.8.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.009",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Authenticator versions ant\u00e9rieures \u00e0 6.2401.0617",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "SQL Server backend pour Django versions ant\u00e9rieures \u00e0 1.4.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-21392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21392"
    },
    {
      "name": "CVE-2024-21426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21426"
    },
    {
      "name": "CVE-2024-21390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21390"
    },
    {
      "name": "CVE-2024-21419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21419"
    },
    {
      "name": "CVE-2024-26198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26198"
    },
    {
      "name": "CVE-2024-21448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21448"
    },
    {
      "name": "CVE-2024-21411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21411"
    },
    {
      "name": "CVE-2024-26165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26165"
    },
    {
      "name": "CVE-2024-21334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21334"
    },
    {
      "name": "CVE-2024-21330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21330"
    },
    {
      "name": "CVE-2024-21418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21418"
    },
    {
      "name": "CVE-2024-26164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26164"
    },
    {
      "name": "CVE-2024-26201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26201"
    },
    {
      "name": "CVE-2024-26190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26190"
    }
  ],
  "initial_release_date": "2024-03-13T00:00:00",
  "last_revision_date": "2024-03-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21418 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21418"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21448 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21448"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21390 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21390"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21334 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21334"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21392 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26201 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26201"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26198 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26198"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26190 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26190"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21411 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21411"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21419 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21419"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21426 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21426"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21330 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26164 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26164"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26165 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26165"
    }
  ],
  "reference": "CERTFR-2024-AVI-0208",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft les produits Microsoft du 12 mars 2024",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Azure Sentinel versions ant\u00e9rieures \u00e0 OMS Agent pour Linux GA v1.19.0",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure SDK versions ant\u00e9rieures \u00e0 1.29.5",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Kubernetes Service Confidential Containers versions ant\u00e9rieures \u00e0 0.3.3",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Automation Update Management versions ant\u00e9rieures \u00e0 OMS Agent pour Linux GA v1.19.0",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Data Studio versions ant\u00e9rieures \u00e0 1.48.0",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Security Center versions ant\u00e9rieures \u00e0 OMS Agent pour Linux GA 1.19.0",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Automation versions ant\u00e9rieures \u00e0 OMS Agent pour Linux GA 1.19.0",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2024-21400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21400"
    },
    {
      "name": "CVE-2024-21330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21330"
    },
    {
      "name": "CVE-2024-21421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21421"
    },
    {
      "name": "CVE-2024-26203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26203"
    }
  ],
  "initial_release_date": "2024-03-13T00:00:00",
  "last_revision_date": "2024-03-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21400 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21400"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-26203 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26203"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21330 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21421 du 12 mars 2024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21421"
    }
  ],
  "reference": "CERTFR-2024-AVI-0207",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-03-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une usurpation d\u0027identit\u00e9 et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure du 12 mars 2024",
      "url": null
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2024-21330",
    "id": "GSD-2024-21330"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-21330"
      ],
      "details": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability",
      "id": "GSD-2024-21330",
      "modified": "2023-12-13T01:21:42.786848Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2024-21330",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "System Center Operations Manager (SCOM) 2019",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.19.0",
                          "version_value": "10.19.1253.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "System Center Operations Manager (SCOM) 2022",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.22.0",
                          "version_value": "10.22.1070.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Azure Automation",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "OMS Agent for Linux GA 1.19.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Azure Automation Update Management",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "OMS Agent for Linux GA v1.19.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Azure Sentinel",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "OMS Agent for Linux GA v1.19.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Container Monitoring Solution",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "microsoft-oms-latest with full ID: sha256:855bfeb0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Azure HDInsight",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0",
                          "version_value": "omi-1.8.1-0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Open Management Infrastructure",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0",
                          "version_value": "OMI version 1.8.1-0"
                        },
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "1.8.1-0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Azure Security Center",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "OMS Agent for Linux GA 1.19.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Log Analytics Agent",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1.0.0",
                          "version_value": "OMS Agent for Linux GA v1.19.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-122",
                "lang": "eng",
                "value": "CWE-122: Heap-based Buffer Overflow"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability"
          },
          {
            "lang": "es",
            "value": "Infraestructura de gesti\u00f3n abierta (OMI) Vulnerabilidad de elevaci\u00f3n de privilegios"
          }
        ],
        "id": "CVE-2024-21330",
        "lastModified": "2024-04-11T20:15:19.693",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "secure@microsoft.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2024-03-12T17:15:49.143",
        "references": [
          {
            "source": "secure@microsoft.com",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Awaiting Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-122"
              }
            ],
            "source": "secure@microsoft.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren und Informationen falsch darzustellen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0612 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0612.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0612 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0612"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-03-12",
        "url": "https://msrc.microsoft.com/update-guide"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7149967 vom 2024-05-01",
        "url": "https://www.ibm.com/support/pages/node/7149967"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-05-01T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:22.718+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0612",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-05-01T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3.3-7.5.0",
                "product": {
                  "name": "IBM QRadar SIEM 7.3.3-7.5.0",
                  "product_id": "T034489",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.3.3_-_7.5.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Automation",
                "product": {
                  "name": "Microsoft Azure Automation",
                  "product_id": "T033405",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:automation"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Automation Update Management",
                "product": {
                  "name": "Microsoft Azure Automation Update Management",
                  "product_id": "T033406",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:automation_update_management"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Data Studio",
                "product": {
                  "name": "Microsoft Azure Data Studio",
                  "product_id": "T033407",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:data_studio"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Kubernetes Service Confidential Containers",
                "product": {
                  "name": "Microsoft Azure Kubernetes Service Confidential Containers",
                  "product_id": "T033409",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:kubernetes_service_confidential_containers"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "SDK",
                "product": {
                  "name": "Microsoft Azure SDK",
                  "product_id": "T033410",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sdk"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Security Center",
                "product": {
                  "name": "Microsoft Azure Security Center",
                  "product_id": "T033412",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:security_center"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Sentinel",
                "product": {
                  "name": "Microsoft Azure Sentinel",
                  "product_id": "T033413",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sentinel"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21330",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21330"
    },
    {
      "cve": "CVE-2024-21334",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21334"
    },
    {
      "cve": "CVE-2024-21400",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21400"
    },
    {
      "cve": "CVE-2024-21418",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21418"
    },
    {
      "cve": "CVE-2024-21421",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21421"
    },
    {
      "cve": "CVE-2024-26203",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-26203"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Windows Defender ist in Windows integriert, um Ihren PC in Echtzeit vor Viren, Spyware und anderer Schadsoftware zu sch\u00fctzen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft System Center ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Rechte zu erweitern.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0620 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0620.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0620 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0620"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-03-12",
        "url": "https://msrc.microsoft.com/update-guide"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft System Center: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-03-12T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:25.119+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0620",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Antimalware Platform",
                "product": {
                  "name": "Microsoft Windows Defender Antimalware Platform",
                  "product_id": "T024301",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:windows_defender:credential_guard"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Defender"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21334",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21334"
    },
    {
      "cve": "CVE-2024-21330",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21330"
    },
    {
      "cve": "CVE-2024-20671",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-20671"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Windows Defender ist in Windows integriert, um Ihren PC in Echtzeit vor Viren, Spyware und anderer Schadsoftware zu sch\u00fctzen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft System Center ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Rechte zu erweitern.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0620 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0620.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0620 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0620"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-03-12",
        "url": "https://msrc.microsoft.com/update-guide"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft System Center: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-03-12T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:25.119+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0620",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Antimalware Platform",
                "product": {
                  "name": "Microsoft Windows Defender Antimalware Platform",
                  "product_id": "T024301",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:windows_defender:credential_guard"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Defender"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21334",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21334"
    },
    {
      "cve": "CVE-2024-21330",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21330"
    },
    {
      "cve": "CVE-2024-20671",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt mehrere Sicherheitsl\u00fccken in Microsoft System Center in der Komponente Windows Defender Antimalware Platform. Die Schwachstellen bestehen aufgrund eines Use-after-free-Fehlers und weil der Start von Microsoft Defender neben anderen unbeschriebenen Angriffen verhindert werden kann. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T024301"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-20671"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code auszuf\u00fchren und Informationen falsch darzustellen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0612 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0612.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0612 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0612"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-03-12",
        "url": "https://msrc.microsoft.com/update-guide"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7149967 vom 2024-05-01",
        "url": "https://www.ibm.com/support/pages/node/7149967"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-05-01T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:06:22.718+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0612",
      "initial_release_date": "2024-03-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-03-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-05-01T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3.3-7.5.0",
                "product": {
                  "name": "IBM QRadar SIEM 7.3.3-7.5.0",
                  "product_id": "T034489",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.3.3_-_7.5.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Automation",
                "product": {
                  "name": "Microsoft Azure Automation",
                  "product_id": "T033405",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:automation"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Automation Update Management",
                "product": {
                  "name": "Microsoft Azure Automation Update Management",
                  "product_id": "T033406",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:automation_update_management"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Data Studio",
                "product": {
                  "name": "Microsoft Azure Data Studio",
                  "product_id": "T033407",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:data_studio"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Kubernetes Service Confidential Containers",
                "product": {
                  "name": "Microsoft Azure Kubernetes Service Confidential Containers",
                  "product_id": "T033409",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:kubernetes_service_confidential_containers"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "SDK",
                "product": {
                  "name": "Microsoft Azure SDK",
                  "product_id": "T033410",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sdk"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Security Center",
                "product": {
                  "name": "Microsoft Azure Security Center",
                  "product_id": "T033412",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:security_center"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Sentinel",
                "product": {
                  "name": "Microsoft Azure Sentinel",
                  "product_id": "T033413",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sentinel"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21330",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21330"
    },
    {
      "cve": "CVE-2024-21334",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21334"
    },
    {
      "cve": "CVE-2024-21400",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21400"
    },
    {
      "cve": "CVE-2024-21418",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21418"
    },
    {
      "cve": "CVE-2024-21421",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-21421"
    },
    {
      "cve": "CVE-2024-26203",
      "notes": [
        {
          "category": "description",
          "text": "In Microsoft Azure existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund eines use-after-free Fehlers und zahlreicher unbeschriebener Fehler. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu erweitern und Informationen falsch darzustellen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033413",
          "T033412",
          "T034489",
          "T033406",
          "T033407",
          "T033405",
          "T033409",
          "T033410"
        ]
      },
      "release_date": "2024-03-12T23:00:00.000+00:00",
      "title": "CVE-2024-26203"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-21330"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-122",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-12T17:15:49Z",
    "severity": "HIGH"
  },
  "details": "Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability",
  "id": "GHSA-6m8c-mx2x-w4pf",
  "modified": "2024-03-12T18:31:12Z",
  "published": "2024-03-12T18:31:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21330"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}