Hashicorp : Security Vulnerabilities, CVEs, (Code Execution)
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.
Max CVSS
8.8
EPSS Score
0.07%
Published
2017-08-08
Updated
2019-10-03
1 vulnerabilities found