CVE-2022-38368

Summary: CVE-2022-38368 affects Aviatrix Gateway. The issue arises because Gateway API functions mishandle authentication, enabling an authenticated VPN user to inject arbitrary commands. Affected versions: Aviatrix Gateway prior to 6.6.5712 and 6.7.x prior to 6.7.1376. Impact: Command injection ...

CVE-2020-13417

CVE-2020-13417 is an Elevation of Privilege affecting Aviatrix VPN Client, linked to an incomplete fix for CVE-2020-7224. Connected sources confirm the issue occurs on Linux, macOS, and Windows installations when OpenSSL parameters are altered from the issued values, enabling loading of unauthori...

CVE-2020-13414

CVE-2020-13414 affects Aviatrix Controller prior to 5.4.1204. The issue is an information disclosure vulnerability described as credentials unused by the software. NVD metrics list CVSSv3.1 base score 7.5 (HIGH) with network access and low exploit complexity; confidentiality impact HIGH, others N...