CVE-2021-3948

🗓️ 18 Feb 2022 00:00:00Reported by redhatType

An incorrect default permissions vulnerability in mig-controller may allow migration of malicious workload, impacting confidentiality, integrity, and availability

Reporter	Title	Published	Views	Family All 11
AlpineLinux	CVE-2021-3948	18 Feb 202200:00	–	alpinelinux
CNNVD	QEMU 安全漏洞	10 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-3948	18 Feb 202200:00	–	cvelist
EUVD	EUVD-2021-27158	7 Oct 202500:30	–	euvd
NVD	CVE-2021-3948	18 Feb 202218:15	–	nvd
Prion	Design/Logic Flaw	18 Feb 202218:15	–	prion
Positive Technologies	PT-2022-10920 · Unknown · Mig-Controller	18 Feb 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-3948	11 Nov 202116:21	–	redhatcve
RedHat Linux	Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.5.2 security update and bugfix advisory	29 Nov 202114:32	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.3 security and bug fix update	20 Jan 202206:31	–	redhat

NVD

Vulners

Node

konveyor mig-controllerRange<1.5.2

konveyor mig-controllerRange1.6.0–1.6.3

Node

redhat migration_toolkitMatch1.0

AND

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

redhat migration_toolkitMatch1.5containers

redhat migration_toolkitMatch1.6containers

[
  {
    "vendor": "n/a",
    "product": "mig-controller",
    "versions": [
      {
        "version": "konveyor/mig-controller release-1.5.2, konveyor/mig-controller release-1.6.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2024 06:23Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.3

CVSS 26.5

EPSS0.00131

CWE-276