### [CVE-2021-38645](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38645)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Automation%20State%20Configuration%2C%20DSC%20Extension&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Automation%20Update%20Management&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Diagnostics%20(LAD)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Security%20Center&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Sentinel&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Azure%20Stack%20Hub&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Container%20Monitoring%20Solution&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Log%20Analytics%20Agent&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Open%20Management%20Infrastructure&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=System%20Center%20Operations%20Manager%20(SCOM)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=16.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=2.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=3.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Elevation%20of%20Privilege&color=brightgreen)

### Description

Open Management Infrastructure Elevation of Privilege Vulnerability

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Avento/Apache_Druid_JNDI_Vuln
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
- https://github.com/joshhighet/omi
- https://github.com/rcarboneras/OMIGOD-OMSAgentInfo
- https://github.com/sbiqbe/omigod-check
- https://github.com/wiz-sec-public/cloud-middleware-dataset
- https://github.com/wiz-sec/cloud-middleware-dataset