CVE-2017-16001

HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) 5.0.1 is affected by a local privilege-escalation via subversion of the plugin update process, allowing local attackers/malware to escalate to root. The issue is specific to the 5.0.1 release; mitigation is available in version 5.0.2....

CVE-2017-16001

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...