First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-21330

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
Microsoft	System Center Operations Manager (SCOM) 2019	>= 10.19.0, < 10.19.1253.0
Microsoft	System Center Operations Manager (SCOM) 2022	>= 10.22.0, < 10.22.1070.0
Microsoft	Azure Automation	>= 1.0.0, < OMS Agent for Linux GA 1.19.0
Microsoft	Azure Automation Update Management	>= 1.0.0, < OMS Agent for Linux GA v1.19.0
Microsoft	Azure Sentinel	>= 1.0.0, < OMS Agent for Linux GA v1.19.0
Microsoft	Container Monitoring Solution	>= 1.0.0, < microsoft-oms-latest with full ID: sha256:855bfeb0
Microsoft	Azure HDInsight	>= 1.0, < omi-1.8.1-0
Microsoft	Open Management Infrastructure	>= 16.0, < OMI version 1.8.1-0
Microsoft	Open Management Infrastructure	>= 1.0.0, < 1.8.1-0
Microsoft	Azure Security Center	>= 1.0.0, < OMS Agent for Linux GA 1.19.0
Microsoft	Log Analytics Agent	>= 1.0.0, < OMS Agent for Linux GA v1.19.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330Vendor Advisory

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-213318.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-213328.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-213338.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-213349.8Open Management Infrastructure (OMI) Remote Code Execution Vulnerability CVE-2024-213358.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-213362.5Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2024-213375.2Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2024-213387.8Windows Kernel Elevation of Privilege Vulnerability CVE-2024-213396.4Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-21346.5A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknow CVE-2024-213404.6Windows Kernel Information Disclosure Vulnerability CVE-2024-213416.8Windows Kernel Remote Code Execution Vulnerability