CVE-2024-10228
Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user
The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23
Reserved 2024-10-22 | Published 2024-10-29 | Updated 2024-10-30 | Assigner HashiCorpCWE-732: Incorrect Permission Assignment for Critical Resource
discuss.hashicorp.com/...o-modification-by-unprivileged-user
Support options
