Design/Logic Flaw

2021-04-2901:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

CPENameOperatorVersion
vpn_clientlt2.14.14

CPE	Name	Operator	Version
	vpn_client	lt	2.14.14

References

docs.aviatrix.com/Downloads/samlclient.html

docs.aviatrix.com/HowTos/changelog.html