Kurz gesagt
- CVE-2026-53475 ist eine Schwachstelle (HOCH (CVSS 7.4)) in github.com/kubev2v/assisted-migration-agent, assisted migration agent (kubev2v).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.25%, höher als bei 16.9% aller Schwachstellen.
- Abhilfe: auf 0.16.0, 2026-06-10 oder neuer aktualisieren.
Description
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
NVD description
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
Weitere Schwachstellen in github.com/kubev2v/assisted-migration-agent
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free