HashiCorp Vulnerabilities and Affected Products
Vulnerabilities associated with Vagrant.
Products
Clear product- Vault Enterprise44 vulnerabilities
- Vault39 vulnerabilities
- Nomad Enterprise23 vulnerabilities
- Nomad21 vulnerabilities
- Consul20 vulnerabilities
- Consul Enterprise19 vulnerabilities
- Tooling11 vulnerabilities
- Shared library8 vulnerabilities
- Boundary4 vulnerabilities
- vault_enterprise4 vulnerabilities
- Boundary Enterprise3 vulnerabilities
- Terraform Enterprise3 vulnerabilities
- go-getter2 vulnerabilities
- Vagrant2 vulnerabilities
- boundary_enterprise1 vulnerability
- shared_library1 vulnerability
- Terraform1 vulnerability
- vault_community_edition1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Vagrant VMWare Utility installation files vulnerable to modification by unprivileged userThe Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23 CWE-732Oct 29, 2024 | CVSS3.8v3.1 | EPSS0.142% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
Vagrant’s Windows Installer Allowed Directory Junction WriteHashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0. | CVSS3.8v3.1 | EPSS0.223% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |