| Package | Affected versions | Patched versions |
|---|---|---|
| gateway | ≥ 6.7.0, < 6.7.1376< 6.6.5712 | 6.7.13766.6.5712 |
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free