{"id":"CVE-2024-10228","summary":"Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user","details":"The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagrant VMWare Utility 1.0.23","modified":"2026-08-12T03:51:31.466520373Z","published":"2024-10-29T21:18:13.145Z","database_specific":{"cna_assigner":"HashiCorp","cwe_ids":["CWE-732"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10228.json"},"references":[{"type":"WEB","url":"https://discuss.hashicorp.com/t/hcsec-2024-25-vagrant-vmware-utility-installation-files-vulnerable-to-modification-by-unprivileged-user"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10228.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10228"},{"type":"PACKAGE","url":"https://github.com/hashicorp/vagrant-vmware-desktop"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hashicorp/vagrant-vmware-desktop","events":[{"introduced":"0"},{"fixed":"58767f86f2d4637b5e2b5a86f4579f6000fde305"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.0.23"}],"source":"AFFECTED_FIELD"}}],"versions":["desktop-v3.0.4","utility-v1.0.22+pkgs-30bf919","utility-v1.0.22+bins-30bf919","utility-v1.0.22+pkgs-c42bad4","utility-v1.0.22+bins-c42bad4","utility-v1.0.22+pkgs-9aab714","utility-v1.0.22+bins-9aab714","utility-v1.0.22+bins-c104d87","utility-v1.0.22+bins-b6d5372","utility-v1.0.22+bins-49a403e","utility-v1.0.22+pkgs-6c11061","utility-v1.0.22+bins-6c11061","utility-v1.0.22+pkgs-d537c33","utility-v1.0.22+bins-d537c33","utility-v1.0.22+pkgs-42d4bb3","utility-v1.0.22+bins-42d4bb3","utility-v1.0.22+pkgs-a94b555","utility-v1.0.22+bins-a94b555","utility-v1.0.22+pkgs-d1477e8","utility-v1.0.22+bins-d1477e8","desktop-v3.0.3","utility-v1.0.22+pkgs-c10bc1b","utility-v1.0.22+bins-c10bc1b","utility-v1.0.22+pkgs-73d2060","utility-v1.0.22+bins-73d2060","utility-v1.0.22","utility-v1.0.21+pkgs-e831d14","utility-v1.0.21+bins-e831d14","utility-v1.0.21+bins-dbf5547","desktop-v3.0.2","1.0.21+bins-d4226fa","utility-v1.0.21","desktop-v3.0.1","desktop-v3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10228.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N"}]}