CVE-2017-15884
HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) 5.0.0 is affected by a local privilege escalation: a bug in the plugin update mechanism allows a local attacker to silently subvert the update process and escalate to root. The issue involves the updater reinstalling the plugin (inclu...