CVE-2024-9858 Insecure user permissions in Google Cloud Migrate to Containers for Windows

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the...

CVE-2024-9858

Google Cloud Migrate to containers versions 1.1.0 through 1.2.2 on Windows installations are vulnerable to a security risk caused by insecure default user permissions . The software creates a local user named m2cuser with administrator privileges . This vulnerability is triggered if the analyze o...