Design/Logic Flaw

2018-03-2922:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.

CPENameOperatorVersion
vagrant_vmware_fusionge5.0.2
vagrant_vmware_fusionle5.0.4

CPE	Name	Operator	Version
	vagrant_vmware_fusion	ge	5.0.2
	vagrant_vmware_fusion	le	5.0.4

References

m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html