CVE-2023-5834
Vagrant’s Windows Installer Allowed Directory Junction Write
Résumé
Vagrant’s Windows Installer Allowed Directory Junction Write
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com