Skip to content
OpenAdvisories

Package · Go

github.com/kubev2v/assisted-migration-agent

2 known vulnerabilities.

2 results · Feed

  • Critical 9.6

    Assisted-migration-agent: vddk tarball chained-symlink arbitrary file write

    A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and …

  • Critical 9.3

    Assisted-migration-agent: tls verification disabled on all vcenter connections

    A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter adminis…