Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hashicorp Packer 安全漏洞
Vulnerability Description
HashiCorp Hashicorp Packer是美国HashiCorp公司的一个免费的开源工具。用于从单一源配置为多个平台创建黄金映像。 Hashicorp Packer 2.3.1之前版本存在安全漏洞，该漏洞源于sudoers配置是不安全的，如果主机已进行配置，则主机上的非特权用户可以利用sudoers配置中的通配符以root身份执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A