Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Migration Toolkit
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3948 2 Konveyor, Redhat 3 Mig-controller, Enterprise Linux, Migration Toolkit 2024-11-21 6.5 MEDIUM 6.3 MEDIUM
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.
CVE-2020-1712 3 Debian, Redhat, Systemd Project 7 Debian Linux, Ceph Storage, Discovery and 4 more 2024-11-21 4.6 MEDIUM 7.8 HIGH
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.