PT-2023-32366 · Hashicorp · Hashicorp Vagrant

Published 2023-10-27 · Updated 2023-11-13 · CVE-2023-5834

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant versions prior to 2.4.0

Description The issue concerns HashiCorp Vagrant's Windows installer, which targeted a custom location with a non-protected path that could be junctioned. This introduced the potential for unauthorized file system writes.

Recommendations For versions prior to 2.4.0, update to Vagrant 2.4.0 to resolve the issue. As a temporary workaround, consider restricting access to the custom location targeted by the Windows installer to minimize the risk of exploitation.

Fix

Insecure Operation on Windows Junction

Link Following

Weakness Enumeration

CWE-1386

CWE-59

Related Identifiers

CVE-2023-5834

GHSA-47XW-VW6M-W9FQ

Affected Products

Hashicorp Vagrant

References · 7

• https://osv.dev/vulnerability/CVE-2023-5834 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2023-31-vagrant-s-windows-installer-allowed-directory-junction-write/59568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5834 · Security Note
• https://osv.dev/vulnerability/GHSA-47xw-vw6m-w9fq · Vendor Advisory
• https://github.com/hashicorp/vagrant · Note
• https://twitter.com/VulmonFeeds/status/1718062252547276969 · Twitter Post
• https://twitter.com/CVEnew/status/1718015772918960228 · Twitter Post