Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-9858

Insecure user permissions in Google Cloud Migrate to Containers for Windows

Description

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user “m2cuser”. We recommend upgrading to 1.2.3 or beyond

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Cloud Migrate to Containers

Default version status: unaffected

  • 1.1.0 to ≤ 1.2.2affected

References