Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hq4j-33fh-gqx4

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.9
CVSS3: 7.8

Описание

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond

EPSS

Процентиль: 7%
0.00026
Низкий

5.9 Medium

CVSS4

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
nvd
больше 1 года назад

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость программного средства миграции данных и приложений Google Cloud Migrate, связанная с неправильными разрешениями по умолчанию, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 7%
0.00026
Низкий

5.9 Medium

CVSS4

7.8 High

CVSS3

Дефекты

CWE-276