Title

Microsoft System Center Operations Manager Privilege Escalation Vulnerabilities (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple privilege escalation vulnerabilities in Microsoft System Center Operations Manager. To exploit these vulnerabilities, an attacker would entice a user of an affected system to click a malicious URL, which directs the user to a malicious or compromised web site. If successfully exploited, these vulnerabilities would allow an attacker to elevate privileges and issue commands to the System Center Operations Manager in the context of the targeted user.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-36448

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.