Description (CNA)
VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / Avi Load Balancer | affected 32.1.1; affected 31.1.1 through 31.2.2; affected 30.1.1 through 30.2.6; affected 22.1.1 through 22.1.7 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.
No references supplied.