Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2024-10228

Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Vagrant

Default version status: unaffected

  • 0 to < 1.0.23affected

References