fusion-plugin-jwt (>=0.1.0, <=0.1.8), toystore (>=1.1.1, <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (1.1.0)

just-safe-set NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: OSV:GHSA-V26W-GCXH-V4R7...

HashiCorp Vagrant VMware Fusion Plugin Local Elevation of Privilege Vulnerability

The HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion is a tool developed by HashiCorp in the United States for building and managing virtual machine environments on VMware virtual machines. A security vulnerability exists in version 5.0.3 of the HashiCorp Vagrant VMware Fusion...

Design/Logic Flaw

If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...

CVE-2017-16777: Uncontrolled Search Path Element

If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...

PT-2017-14551

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion version 5.0.3 Description A local attacker can exploit the issue to escalate to root by creating a fake application directory and exploiting the suid sudo helper, given that...

CVE-2017-16001

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-16001: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

PT-2017-14354

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions 5.0.1 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version...

CVE-2017-15884

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-15884

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-15884: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

PT-2017-14262

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin version 5.0.0 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version 5.0....

CVE-2017-12579

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 4.0.24 and earlier allows a non-root user to obtain a root shell...

Design/Logic Flaw

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 4.0.24 and earlier allows a non-root user to obtain a root shell...

CVE-2017-12579

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 4.0.24 and earlier allows a non-root user to obtain a root shell...

PT-2017-12584

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion versions 4.0.24 and earlier Description The issue is related to an insecure suid wrapper binary, which allows a non-root user to obtain a root shell. Recommendations For HashiCor...

PT-2017-12216

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.24 Description The issue allows local users to execute arbitrary code with root privileges by overwriting one of the scripts due to weak permissions for the sudo helper scripts...

CVE-2017-11741: Incorrect Default Permissions

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

HashiCorp Vagrant VMware Fusion Plugin Elevation of Privilege Vulnerability

HashiCorp Vagrant VMware Fusion plugin is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. A security vulnerability exists in the sudo helper in HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21. A local attacker...

PT-2017-17858

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21 Description The issue allows local users to gain root privileges due to the failure to verify the path to the encoded ruby script or scrub the PATH variable in the sudo helper of...