CVE-2024-9858

Google Cloud Migrate to containers versions 1.1.0 through 1.2.2 for Windows installs contain an insecure default user permission. The software creates a local user, m2cuser , with administrator privileges , which poses a security risk to the confidentiality, integrity, and accessibility of protec...

CVE-2024-9858 Insecure user permissions in Google Cloud Migrate to Containers for Windows

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the...