Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-53475

Assisted-migration-agent: tls verification disabled on all vcenter connections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

assisted-migration-agent

Default version status: unaffected

  • 0 to < b940fec9f5032a0801e994054d30e81d64b2942aaffected

References