aviatrix Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aviatrix/ Sun, 26 Feb 2023 06:36:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png aviatrix Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aviatrix/ 32 32 CVE-2020-13413 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13413/ Sun, 26 Feb 2023 06:36:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13413/ An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.

The post CVE-2020-13413 appeared first on CVE Vulnerability.

]]> An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.

The post CVE-2020-13413 appeared first on CVE Vulnerability.

]]> CVE-2020-13417 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13417/ Sun, 26 Feb 2023 06:36:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13417/ An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.

The post CVE-2020-13417 appeared first on CVE Vulnerability.

]]> An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.

The post CVE-2020-13417 appeared first on CVE Vulnerability.

]]> CVE-2019-6724 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6724/ Sun, 26 Feb 2023 06:34:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6724/ The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.

The post CVE-2019-6724 appeared first on CVE Vulnerability.

]]> The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.

The post CVE-2019-6724 appeared first on CVE Vulnerability.

]]> CVE-2019-17387 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17387/ Sun, 26 Feb 2023 06:31:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17387/ An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.

The post CVE-2019-17387 appeared first on CVE Vulnerability.

]]> An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.

The post CVE-2019-17387 appeared first on CVE Vulnerability.

]]> CVE-2019-17388 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17388/ Sun, 26 Feb 2023 06:31:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17388/ Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

The post CVE-2019-17388 appeared first on CVE Vulnerability.

]]> Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

The post CVE-2019-17388 appeared first on CVE Vulnerability.

]]> CVE-2021-31776 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-31776/ Thu, 23 Feb 2023 14:09:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-31776/ Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

The post CVE-2021-31776 appeared first on CVE Vulnerability.

]]> Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

The post CVE-2021-31776 appeared first on CVE Vulnerability.

]]>