Unscored CVE-2021-31776 EUVD-2021-18660GHSA-5m6v-4w72-r82q

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if th…

Published Apr 29, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

References

https://docs.aviatrix.com/Downloads/samlclient.html
https://docs.aviatrix.com/HowTos/changelog.html#aviatrix-vpn-client-changelog
https://docs.aviatrix.com/Downloads/samlclient.html#windows-win