All packages
HashiCorp Vagrant VMware Fusion plugin version 5.0.0 vulnerabilities
3 known CVE vulnerabilities in HashiCorp Vagrant VMware Fusion plugin version 5.0.0, translated and rated.
- CVE-2017-16777High
The HashiCorp Vagrant VMware Fusion plugin version 5.0.3, when installed without VMware Fusion, allows a local attacker to create a fake application directory and exploit the suid sudo helper to escalate privileges to root.
- CVE-2017-16001High
The HashiCorp Vagrant VMware Fusion plugin version 5.0.1 is vulnerable to a local attack that allows silent subversion of the plugin update process, potentially leading to root privilege escalation.
- CVE-2017-15884High
The HashiCorp Vagrant VMware Fusion plugin version 5.0.0 is vulnerable to a local attack that allows silent subversion of the plugin update process, potentially leading to root privilege escalation.