ID:6782 - Exploit for Code Injection in Azure Open Management Infrastructure - CVE-2021-38647

 
Main Vulnerability Database Exploits ID:6782 - Exploit for Code Injection in Azure Open Management Infrastructure - CVE-2021-38647

ID:6782 - Exploit for Code Injection in Azure Open Management Infrastructure - CVE-2021-38647

Published: September 22, 2021


Vulnerability identifier: #VU56504
Vulnerability risk: High
CVE-ID: CVE-2021-38647
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
Azure Open Management Infrastructure

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in Open Management Infrastructure. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.