CVE-2017-15884
HighSummary
The HashiCorp Vagrant VMware Fusion plugin version 5.0.0 is vulnerable to a local attack that allows silent subversion of the plugin update process, potentially leading to root privilege escalation.
Risk Assessment
An attacker or malware could exploit this vulnerability to gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the plugin to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in HashiCorp Vagrant VMware Fusion plugin version 5.0.0
See all- CVE-2017-16777High
The HashiCorp Vagrant VMware Fusion plugin version 5.0.3, when installed without VMware Fusion, allows a local attacker to create a fake application directory and exploit the suid sudo helper to escalate privileges to root.
- CVE-2017-16001High
The HashiCorp Vagrant VMware Fusion plugin version 5.0.1 is vulnerable to a local attack that allows silent subversion of the plugin update process, potentially leading to root privilege escalation.
Original NVD description (English source)
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.