Vagrant vulnerabilities
2 known vulnerabilities in Vagrant from HashiCorp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
Vagrant: Improper Link Resolution Before File Access
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
- 7.8 High severity
Vagrant: Improper Access Control
An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the s