Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-42717

Опубликовано: 11 окт. 2022
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:hashicorp:vagrant:*:*:*:*:*:*:*:*
Версия до 2.3.1 (исключая)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00099
Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-Other
CWE-284

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.

CVSS3: 7.8
msrc
больше 3 лет назад

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.

CVSS3: 7.8
github
больше 3 лет назад

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.

EPSS

Процентиль: 27%
0.00099
Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-Other
CWE-284