8 matches found
SUSE CVE-2026-53471
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
GO-2026-6228 Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner
Openshift Migration Advisor agent-API fails to validate JWT sourceid claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...
Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
CVE-2026-53471: Authorization Bypass Through User-Controlled Key
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
CVE-2025-58801
creationtimestamp| type| source ---|---|--- 2025-09-08 17:34:45+00:00| seen| Telegram/HTMmcPYImXFch9EWQ9RXb78PhDZ5C7lEAbY9khA04qt94...
CVE-2024-8651
creationtimestamp| type| source ---|---|--- 2024-09-19 20:20:22+00:00| seen| https://t.me/cvedetector/6062...