CVE-2019-17388 - Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications

Back Back to CVE browser

HIGH

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications

Published Dec 5, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.57%

Description

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (3)

https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html
x_refsource_MISCRelease NotesVendor Advisory
https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/
x_refsource_MISCExploitThird Party Advisory
https://immersivelabs.com/blog/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html		x_refsource_MISCRelease NotesVendor Advisory
https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/		x_refsource_MISCExploitThird Party Advisory
https://immersivelabs.com/blog/		x_refsource_MISCThird Party Advisory