Security Advisory

CVE-2023-5834

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-27 21:06:38
Last updated 2024-09-09 17:58:26
Assigner HashiCorp
CVSS score 3.8
State PUBLISHED

Description

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.