CVE-2022-38368

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376

published August 15, 2022

CVSS
—
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00790 · 55.8th percentile
Published
2022-08-15T20:59Z
EPSS history
Timeline
  • 15 AUG 20:59Z
    An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376
    cvelistv5