CoreCVE
Back

HIGH

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts

Published Aug 8, 2017

Description

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Aug 8, 2017
Updated Aug 5, 2024
Reserved Jul 29, 2017
Link CVE-2017-11741

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2017-11741

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Aug 8, 2017
Updated Aug 5, 2024
Link EUVD-2017-3351

GitHub

No data