Description
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
Unscored
CVE-2022-38368
EUVD-2022-40956GHSA-583q-h2h6-7284
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authenticati…
Published Aug 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre