CVE-2021-1728: System Center Operations Manager Elevation of Privilege Vulnerability

Overview

Severity

High (CVSS 8.8)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Category

Elevation of Privilege

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2021-Feb

Released

2021-02-09

EPSS Score

1.32% (percentile: 79.9%)

FAQ

In what instances do I need to install the security update for this vulnerability? This vulnerability only affects machines that have any of the following System Center 2019 - Operations Manager (SCOM) components installed: Management Server Microsoft Monitoring Agent Gateway Is there a prerequisite for installing the security update? Yes. To apply this update, you must have Update Rollup 2 for System Center Operations Manager 2019 installed. See the How to obtain Update Rollup 2 for System Center Operations Manager 2019 section for instructions. Do I need to install the update if I do not have "Enable Service log on" feature enabled? No. This update is required if “Service Log on” or “Interactive Log on” is enabled for customers on System Center 2019 – Operations Manager.

Affected Products (1)

System Center

• System Center 2019 Operations Manager

Security Updates (1)

• 4601269

Revision History

• 2021-02-09: Information published.