Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-a6v6-4dm9-nuab
Vulnerability ID VCID-a6v6-4dm9-nuab
Aliases CVE-2021-3948
Summary mig-controller: incorrect namespaces handling may lead to not authorized usage of Migration Toolkit for Containers (MTC)
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-276 Incorrect Default Permissions
System Score Found at
cvssv3 6.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3948.json
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
epss 0.00192 https://api.first.org/data/v1/epss?cve=CVE-2021-3948
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3948.json
https://api.first.org/data/v1/epss?cve=CVE-2021-3948
2022017 https://bugzilla.redhat.com/show_bug.cgi?id=2022017
RHSA-2021:4848 https://access.redhat.com/errata/RHSA-2021:4848
RHSA-2022:0202 https://access.redhat.com/errata/RHSA-2022:0202
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3948.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.41048
EPSS Score 0.00192
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:01:02.373409+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3948.json 38.0.0