CVE-2021-3948CWE-276

An incorrect default permissions vulnerability was found in the mig-controller

published February 18, 2022

CVSS
—
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00564 · 46.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-02-18T00:00Z
EPSS history
Timeline
  • 18 FEB 00:00Z
    An incorrect default permissions vulnerability was found in the mig-controller
    cvelistv5