CVE-2024-9858

Google Cloud Migrate to containers versions 1.1.0 through 1.2.2 on Windows installations are vulnerable to a security risk caused by insecure default user permissions . The software creates a local user named m2cuser with administrator privileges . This vulnerability is triggered if the analyze o...

CVE-2024-9858: Incorrect Default Permissions

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the...

PT-2024-7334 · Google · Google Cloud Migrate To Containers

Name of the Vulnerable Software and Affected Versions: Google Cloud Migrate to Containers versions 1.1.0 through 1.2.2 Description: The issue is related to an insecure default user permission in Google Cloud Migrate to containers. A local user m2cuser is created with administrator privileges,...