CVE-2020-7224

CVE-2020-7224 affects the Aviatrix OpenVPN client prior to 2.5.7 on Linux, macOS, and Windows. The issue arises when OpenSSL parameters are altered from the issued value set, potentially allowing unauthorized third-party libraries to load. Public sources (NVD entry and Red Hat advisory) provide t...

CVE-2020-27569

The CVE-2020-27569 entry concerns Aviatrix VPN Client 2.8.2 and earlier, where the VPN service writes logs to a world-writable location, enabling arbitrary file write with potential to modify any file on the system. The connected OSV entries corroborate the same description; no exploitation detai...