CVE-2022-29149: Microsoft Azure Automation State Configuration

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Affected products

• Microsoft Azure Automation State Configuration: affected versions not specified
• Microsoft Azure Automation Update Management: affected versions not specified
• Microsoft Azure Diagnostics: from 3.0, before 3.0.137 (fixed in 3.0.137); from 4.0, before 4.0.27 (fixed in 4.0.27)
• Microsoft Azure Security Center: before 1.14.13 (fixed in 1.14.13)
• Microsoft Azure Sentinel: before 1.14.13 (fixed in 1.14.13)
• Microsoft Azure Stack Hub: before 1.14.13 (fixed in 1.14.13)
• Microsoft Container Monitoring Solution: affected versions not specified
• Microsoft Log Analytics Agent: affected versions not specified
• Microsoft Open Management Infrastructure: before 1.6.9-1 (fixed in 1.6.9-1)
• Microsoft System Center Operations Manager: version 2016 only; version 2019 only; version 2022 only

Published 2022-06-15. Last modified 2026-06-17.