high7.5
CVE-2020-27569
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.
Impact
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatrix | Openvpn | through 2.8.2 |