CVE-2019-17388

概要

参考情報

• docs.aviatrix.com/HowTos/UCC_Release_Notes.html · Release Notes
• immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability · Exploit
• immersivelabs.com/blog · Third Party Advisory

vpn client のその他の脆弱性

• CVE-2021-31776高 7.8Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the…
• CVE-2020-13417緊急 9.8An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This af…
• CVE-2020-13413中 5.3An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easi…
• CVE-2019-17387高 7.8An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through …