CVE-2021-3948: Konveyor Mig-Controller

Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.

Affected products

• Konveyor Mig-Controller: before 1.5.2 (fixed in 1.5.2); from 1.6.0, before 1.6.3 (fixed in 1.6.3)
• Red Hat Migration Toolkit: version 1.0 only; version 1.5 only; version 1.6 only

Published 2022-02-18. Last modified 2026-06-17.