critical9.8
CVE-2020-13417
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.
Impact
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatrix | Controller | before 5.3 |
| Aviatrix | Gateway | before 5.3 |
| Aviatrix | Vpn Client | before 2.10.7 |
References
- NVD record
- CVE.org record
- https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege
- https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
- https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege
- https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/