All packages
HashiCorp Vagrant VMware Fusion plugin vulnerabilities
3 known CVE vulnerabilities in HashiCorp Vagrant VMware Fusion plugin, translated and rated.
- CVE-2017-12579High
The HashiCorp Vagrant VMware Fusion plugin version 4.0.24 and earlier contains an insecure suid wrapper binary that allows a non-root user to obtain a root shell.
- CVE-2017-11741High
The HashiCorp Vagrant VMware Fusion plugin before version 4.0.24 uses weak permissions for the sudo helper scripts, allowing local users to execute arbitrary code with root privileges by overwriting one of the scripts.
- CVE-2017-7642High
The HashiCorp Vagrant VMware Fusion plugin before version 4.0.21 contains a vulnerability that allows local users to gain root privileges. The issue arises from the failure to verify the path to the encoded Ruby script and the lack of scrubbing of the PATH variable.