Skip to content
Sign in
3.8 Low

CVE-2023-5834 HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned,…

Description

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

Affected products and versions

Product Affected versions Fixed in
Vagrant 2.4 earliest → < 2.4.0 2.4.0

Other CVEs of Vagrant

The 2 CVEs of Vagrant →
CVE-2024-10228 The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified… 3.8 Low
Track this CVE