What is CVE-2021-41352?

CVE-2021-41352 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. SCOM Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-41352 cover?

CVE-2021-41352 covers the following CVE IDs: CVE-2021-41352. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-41352?

CVE-2021-41352 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-41352?

CVE-2021-41352 affects 3 products, including: System Center 2012 R2 Operations Manager; System Center 2016 Operations Manager; System Center 2019 Operations Manager.

CVE-2021-41352HighCVSS 7.5

SCOM Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 12, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-41352 →

📋 Description

In what instances do I need to install the security update for this vulnerability? This vulnerability only affects machines that have the SCOM web console installed. SCOM web console server machines should have this update installed to be protected from the vulnerability. Do I need to install the update if my machine is not set up as a web console server? No. Customers whose machines are not SCOM web console server machines do not need to install this update.

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.

🎯 Affected products3

System Center 2012 R2 Operations Manager
System Center 2016 Operations Manager
System Center 2019 Operations Manager

✅ Remediation

KB5006871 (Security Update) — fixed build 7.2.12335.0 KB5006871 (Security Update) — fixed build 10.19.10550.0 KB5006871 (Security Update) — fixed build 7.1.10226.1413

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products3

✅ Remediation

🔗 References (2)