← CVE Intelligence

CVE-2023-5834

Vagrant’s Windows Installer Allowed Directory Junction Write PUBLISHED

Description (CNA)

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

Affected (CNA)

Vendor / productVersions
HashiCorp / Vagrantaffected * before 2.4.0

CWE

CWE-1386

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.