Vulnerabilities (CVE)

Filtered by vendor Hashicorp Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11741 1 Hashicorp 1 Vagrant Vmware Fusion 2019-10-03 7.2 HIGH 8.8 HIGH
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.
CVE-2018-19786 1 Hashicorp 1 Vault 2018-12-27 4.3 MEDIUM 8.1 HIGH
HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.