CVE-2021-40870

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal...

CVE-2021-40870

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal...

CVE-2021-40870

Summary (CVE-2021-40870) : Aviatrix Controller 6.x before 6.5-1804.1922 is affected by an unrestricted file upload via a directory traversal flaw that enables an unauthenticated attacker to execute arbitrary code. The base vulnerability is described in the primary CVE record, which lists the affe...

PT-2021-7652

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions 6.x through 6.5-1804.1921 Description The issue is related to an unrestricted upload of a file with a dangerous type, allowing an unauthenticated user to execute arbitrary code via directory traversal. This can be...

CVE-2021-40870

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Recent assessments: JoyGhoshs at October 09, 2021 6:33am UTC reported:...

CVE-2021-40870: Relative Path Traversal

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal...

Aviatrix Controller 代码问题漏洞

Aviatrix Controller is an application from Aviatrix, Inc. It extends and controls the native structure using the cloud provider's APIs to extend its functionality and integrate it into the software. A security vulnerability exists in Aviatrix Controller that stems from a lack of effective...

Advisory ROSA-SA-2021-1940

Software: openvpn 2.4.9 OS: Cobalt 7.9 CVE-ID: CVE-2020-11462 CVE-Crit: HIGH CVE-DESC: The issue was found in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. When the full-featured RPC2 interface is enabled, a temporary management interface DoS state can be reached when sending an XML...

The vulnerability of the AVPNC_RP VPN-client Aviatrix VPN Client allows a perpetrator to enhance their privileges or execute arbitrary code.

The vulnerability of the AVPNCRP VPN client from Aviatrix VPN is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...

The vulnerability of the Aviatrix VPN Client lies in the improper assignment of permissions for files, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Aviatrix VPN Client relates to the improper assignment of permissions for files. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

Aviatrix Systems Unspecified Vulnerability in Aviatrix VPN Client

Aviatrix Systems Aviatrix VPN Client is a VPN Virtual Private Network client application that provides SAML authentication from Aviatrix Systems, USA. A security vulnerability exists in Aviatrix VPN Client versions prior to 2.14.14, which can be exploited by an attacker to allow escalation of loc...

CVE-2021-31776

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

CVE-2021-31776

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

Design/Logic Flaw

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

CVE-2021-31776

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

CVE-2021-31776

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

CVE-2021-31776

CVE-2021-31776 affects Aviatrix VPN Client on Windows prior to 2.14.14. The vulnerability is an unquoted search path that enables local privilege escalation to the SYSTEM user when a machine is misconfigured to allow unprivileged users to write to administrator-only directories. Red Hat and CNVD ...

CVE-2021-31776: Unquoted Search Path or Element

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...

PT-2021-19499

Name of the Vulnerable Software and Affected Versions Aviatrix VPN Client versions prior to 2.14.14 Description The issue is related to an unquoted search path in the Aviatrix VPN Client, which can enable local privilege escalation to the SYSTEM user. This occurs if the machine is misconfigured,...

Aviatrix Systems Aviatrix VPN Client 代码问题漏洞

Aviatrix Systems Aviatrix VPN Client is a VPN Virtual Private Network client application that provides SAML authentication from Aviatrix Systems, USA. A security vulnerability exists in Aviatrix VPN Client versions prior to 2.14.14, which can be exploited by an attacker to allow escalation of loc...