Lucene search
+L

31 matches found

osv_cve
osv_cve
•added 2026/06/10 1:55 p.m.•9 views

CVE-2026-53475 Assisted-migration-agent: tls verification disabled on all vcenter connections

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.8AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/06/10 1:55 p.m.•45 views

CVE-2026-53476

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...

9.6CVSS5.8AI score0.00427EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/06/10 1:55 p.m.•46 views

CVE-2026-53475

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.5AI score0.00503EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•4 views

PT-2026-75943

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...

9.6CVSS5.8AI score0.00427EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•37 views

KubeV2V Assisted Migration Agent 后置链接漏洞

Assisted Migration Agent is an open-source virtualization environment data collection and migration planning tool developed by KubeV2V. Assisted Migration Agent has a post-installation vulnerability, which stems from an unauthenticated attacker located within the same network. This attacker...

9.6CVSS5.9AI score0.00427EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•4 views

PT-2026-75950

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.5AI score0.00503EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•3 views

CVE-2026-53475: Improper Certificate Validation

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.5AI score0.00503EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•4 views

CVE-2026-53476: Improper Link Resolution Before File Access

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...

9.6CVSS5.8AI score0.00427EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•34 views

KubeV2V Assisted Migration Agent 加密问题漏洞

Assisted Migration Agent is an open-source virtualization environment data collection and migration planning tool developed by KubeV2V. Assisted Migration Agent has a vulnerability related to trust management. This vulnerability stems from the use of insecure TLS connections hardcoded during...

9.3CVSS5.6AI score0.00503EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•38 views

PT-2026-48448

Name of the Vulnerable Software and Affected Versions assisted-migration-agent affected versions not specified Description The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This design flaw allows a Man-in-the-Middle MITM attacker to...

10CVSS6AI score0.05299EPSS
SaveExploits9References194
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•43 views

PT-2026-48449

Name of the Vulnerable Software and Affected Versions assisted-migration-agent affected versions not specified Description An unauthenticated attacker on the same local area network LAN can exploit a path traversal flaw. By using a specially crafted gzipped tarball, the attacker can bypass securi...

10CVSS6.6AI score0.01641EPSS
SaveExploits6References193
Rows per page
Query Builder