Azure Open Management Infrastructure (OMI)

Reported Context (5)

As new vulnerabilities are discovered in cloud middleware software such as Microsoft OMI (Open Management Infrastructure), used by multiple popular Azure services (Azure Automation, Azure Log analytics Azure Sentinel Azure Adds Opt-In Automatic Updates for Three Agents That Include OMI
a patch to fix a new privilege escalation vulnerability, CVE-2022-29149 in Open Management Infrastructure (OMI), with a CVSS score of 7.8 (the highest score possible for vulnerabilities that allow local privilege OMI Vulnerability Let Attackers Predict a Secret and Escalate to Root
which we will present at RSA Conference 2022, builds upon our previous study on the Azure Open Management Infrastructure (OMI) agent and the OMIGOD findings - a set of vulnerabilities found and published in Wiz Warns of Security Risks From Cloud Agents Installed on Customer VMs
The Wiz Research Team recently found four critical vulnerabilities in OMI, which is one of Azure's most ubiquitous yet least known software agents and is deployed on a large portion of Linux VMs in Azure. The OMIGOD: Four OMI Flaws Expose Azure Linux VMs to Root Compromise
The source of the problem is a ubiquitous but little-known software agent called Open Management Infrastructure (OMI) that’s embedded in many popular Azure services. OMIGOD Flaws Enable Root Access and Code Execution on Azure-Linked Linux Systems

CVE (5)

Malware (1)

People (2)

MITRE ATT&CK (3)

Vendors (2)

Products (14)

Tools (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.