Skip to content
Sign in
3.8 Low

CVE-2024-10228 The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified…

Description

The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23

Affected products and versions

Product Affected versions Fixed in
Vagrant 1.0 earliest → < 1.0.23 1.0.23

Other CVEs of Vagrant

The 2 CVEs of Vagrant →
CVE-2023-5834 HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned,… 3.8 Low
Track this CVE