← Database

CVE-2022-38368

HIGH CVSS: 8.8 Published: 2022-08-15 Modified: 2026-06-17

Description

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

Affected Platforms

Aviatrix Gateway

Weakness Type

CWE-287

References