CVE-2022-38368 in Gateway

Sumário

de MITRE • 16/08/2022

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 15/08/2022
• Divulgação: 16/08/2022
• Moderação: aceite
• Entrada: VDB-206446
• CPE: pronto
• CWE: CWE-77 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.00755
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-38368
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38368
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-38368/