2 matches found
Design/Logic Flaw
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0...
4.3CVSS7.5AI score0.00237EPSS
SaveExploits0References1Affected Software1
CVE-2023-5834 Vagrant’s Windows Installer Allowed Directory Junction Write
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0...
3.8CVSS7.2AI score0.00237EPSS
SaveExploits0References3
20