En bref
- CVE-2026-53475 est une vulnérabilité ÉLEVÉE (CVSS 7.4) touchant github.com/kubev2v/assisted-migration-agent, assisted migration agent (kubev2v).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.25%, plus élevée que 16.9% des vulnérabilités.
- Correctif : mettre à jour vers 0.16.0, 2026-06-10 ou plus récent.
Description
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
NVD description
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
Autres vulnérabilités de github.com/kubev2v/assisted-migration-agent
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free