CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to…

published August 8, 2017

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01109 · 65.6th percentile
Published
2017-08-08T19:00Z
EPSS history
Timeline
  • 08 AUG 19:00Z
    HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to…
    cvelistv5