Gateway Security Vulnerabilities and Issues — Gateway CVE List

Lucene search

AviatrixGateway

3 matches found

CVE•added 2022/08/15 10:15 p.m.•322 views

CVE-2022-38368

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

8.8CVSS8.5AI score0.00343EPSS

CVE•added 2020/05/22 9:15 p.m.•151 views

CVE-2020-13417

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.

9.8CVSS9.4AI score0.01174EPSS

CVE•added 2020/05/22 9:15 p.m.•120 views

CVE-2020-13414

An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.

7.5CVSS7.5AI score0.00557EPSS