Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vagrant VMware Fusion插件安全漏洞
Vulnerability Description
HashiCorp Vagrant VMware Fusion plugin是美国HashiCorp公司开发的一款用于VMware虚拟机上的构建和管理虚拟机环境的工具。 HashiCorp Vagrant VMware Fusion插件4.0.24之前的版本中存在安全漏洞，该漏洞源于程序为sudo helper脚本分配了弱权限。本地攻击者可通过覆盖脚本利用该漏洞以root权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A