Description
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products.
A malicious user with network access may be able to use specially crafted SQL queries to gain database access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware AVI Load Balancer | VMware AVI Load Balancer 30.1.x and VMware AVI Load Balancer 30.2.x and | — |