Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hashicorp vagrant-vmware-fusion 安全漏洞
Vulnerability Description
Hashicorp vagrant-vmware-fusion是美国HashiCorp公司开发的一款用于VMware虚拟机上的构建和管理虚拟机环境的工具。vagrant update是其中的一个更新进程。 Hashicorp vagrant-vmware-fusion 5.0.2版本至5.0.4版本中的vagrant更新进程存在安全漏洞。本地攻击者可通过发送直接请求利用该漏洞获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A