Red Hat Migration Toolkit vulnerabilities

2 CVEs affecting Red Hat Migration Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3948, published 2022-02-18.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3948, published 2022-02-18. Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days. An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target…
• CVE-2020-1712, published 2020-03-31. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse…