Forum Discussion
OMIGOD: Four Flaws in OMI Agent Leave Azure Linux VMs...
OMIGOD: Four Flaws in OMI Agent Leave Azure Linux VMs Vulnerable to Simple Exploitation
On September 14, researchers at Wiz published a blog post detailing their discovery of four vulnerabilities in Open Management Infrastructure (OMI), an open source common information model (CIM) management server from Microsoft that is used to manage Unix and Linux systems.
The researchers call these flaws “OMIGOD” due to the ease with which an attacker can exploit these flaws, especially CVE-2021-38647, an unauthenticated remote code execution flaw in OMI.
Microsoft published advisories for all four flaws as part of its Patch Tuesday release. Since then, researchers have observed attempts to scan for and exploit CVE-2021-38647. The payloads being installed through these attacks include cryptocurrency miners and the Mirai botnet.
For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.
2 Replies
Are plugins available yet for these CVE's?
Hi @Keith Bull,
As mentioned in the post, details about product coverage can be found in the blog, specifically under the Identifying Affected Systems section. At the moment, our local detection plugin is available and a version check plugin is being pushed out today.
