Command injection

2022-08-1522:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

CPENameOperatorVersion
gatewayge6.7.0
gatewaylt6.7.1376
gatewaylt6.6.5712

Name	Operator	Version
gateway	ge	6.7.0
gateway	lt	6.7.1376
gateway	lt	6.6.5712

References

docs.aviatrix.com/HowTos/PSIRT_Advisories.html