What is CVE-2021-41363?

CVE-2021-41363 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Intune Management Extension Security Feature Bypass Vulnerability

Which CVE IDs does CVE-2021-41363 cover?

CVE-2021-41363 covers the following CVE IDs: CVE-2021-41363. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-41363?

CVE-2021-41363 has a CVSS v3 base score of 4.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-41363?

CVE-2021-41363 affects 1 product, including: Intune management extension.

CVE-2021-41363HighCVSS 4.2

Intune Management Extension Security Feature Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 12, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-41363 →

📋 Description

Are there any pre-requisites for this vulnerability to be exploited in Intune Management Extension? This vulnerability only exists when Intune Management Extension is enabled as managed installer. Enabling IME as managed installer requires local administrator privileges. What should I do to protect myself from this vulnerability? No action is required. As soon as the client connects to the service, it automatically receives a message to update.

🎯 Affected products1

Intune management extension

✅ Remediation

KBWhat's New? (Security Update) — fixed build 1.45.204.0

🔗 References (1)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-41363