CVE-2022-29149: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-15 · updated 2026-06-17

Description

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Affected products

Microsoft Azure Automation State Configuration: all versions
Microsoft Azure Automation Update Management: all versions
Microsoft Azure Diagnostics: from 3.0 before 3.0.137; from 4.0 before 4.0.27 — fixed in 3.0.137, 4.0.27
Microsoft Azure Security Center: before 1.14.13 — fixed in 1.14.13
Microsoft Azure Sentinel: before 1.14.13 — fixed in 1.14.13
Microsoft Azure Stack Hub: before 1.14.13 — fixed in 1.14.13
Microsoft Container Monitoring Solution: all versions
Microsoft Log Analytics Agent: all versions
Microsoft Open Management Infrastructure: before 1.6.9-1 — fixed in 1.6.9-1
Microsoft System Center 2019 Operations Manager: 2016, 2019, 2022
Microsoft Azure Automation State Configuration, DSC Extension: from 2.0.0 before DSC Agent versions: 2.71.1.33, 3.0.0.7 — fixed in DSC Agent versions: 2.71.1.33, 3.0.0.7
Microsoft Azure Automation Update Management: from 1.0.0 before OMS Agent for Linux GA v1.14.13 — fixed in OMS Agent for Linux GA v1.14.13
Microsoft Azure Diagnostics (LAD): from 3.0.0 before LAD v4.0.27 and LAD v3.0.137 — fixed in LAD v4.0.27 and LAD v3.0.137
Microsoft Azure Security Center: from 1.0.0 before OMS Agent for Linux GA v1.14.13 — fixed in OMS Agent for Linux GA v1.14.13
Microsoft Azure Sentinel: from 1.0.0 before OMS Agent for Linux GA v1.14.13 — fixed in OMS Agent for Linux GA v1.14.13
Microsoft Azure Stack Hub: from 1.0.0 before OMS Agent for Linux GA v1.14.13 — fixed in OMS Agent for Linux GA v1.14.13
Microsoft Container Monitoring Solution: from 1.0.0 before publication — fixed in publication
Microsoft Log Analytics Agent: from 1.0.0 before OMS Agent for Linux GA v1.14.13 — fixed in OMS Agent for Linux GA v1.14.13
Microsoft Open Management Infrastructure: from 16.0 before OMI Version 1.6.9-1 — fixed in OMI Version 1.6.9-1
Microsoft System Center Operations Manager (SCOM) 2016: from 7.6.0 before 7.6.1108.0 — fixed in 7.6.1108.0
Microsoft System Center Operations Manager (SCOM) 2019: from 10.19.0 before 10.19.1152.0 — fixed in 10.19.1152.0
Microsoft System Center Operations Manager (SCOM) 2022: from 10.22.0 before 10.22.1024.0 — fixed in 10.22.1024.0

How to fix

Upgrade to a fixed version: Microsoft Azure Diagnostics 3.0.137, 4.0.27; Microsoft Azure Security Center 1.14.13; Microsoft Azure Sentinel 1.14.13; Microsoft Azure Stack Hub 1.14.13; Microsoft Open Management Infrastructure 1.6.9-1; Microsoft Azure Automation State Configuration, DSC Extension DSC Agent versions: 2.71.1.33, 3.0.0.7; Microsoft Azure Automation Update Management OMS Agent for Linux GA v1.14.13; Microsoft Azure Diagnostics (LAD) LAD v4.0.27 and LAD v3.0.137; Microsoft Azure Security Center OMS Agent for Linux GA v1.14.13; Microsoft Azure Sentinel OMS Agent for Linux GA v1.14.13; Microsoft Azure Stack Hub OMS Agent for Linux GA v1.14.13; Microsoft Container Monitoring Solution publication. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-29149 or the next vulnerability affects your stack