high8.8
CVE-2022-38368
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.
Impact
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatrix | Gateway | before 6.6.5712 from 6.7.0 before 6.7.1376 |