HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.
| Software | From | Fixed in |
|---|---|---|
github.com/hashicorp/vagrant
|
- | 2.4.0 |
| hashicorp / vagrant | - | 2.4.0 |