Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-9858 EUVD-2024-50164GHSA-hq4j-33fh-gqx4

Insecure user permissions in Google Cloud Migrate to Containers for Windows

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by Google

Description

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond

Affected products

VendorProductAffectedFixed
Google Cloud Migrate to Containers 1.1.0 – ≤ 1.2.2 —

References