CVE-2020-7224

Name of the Vulnerable Software and Affected Versions Aviatrix OpenVPN client versions through 2.5.7

Description The issue arises when OpenSSL parameters are altered from their issued value set, potentially allowing unauthorized third-party libraries to load. This could lead to unauthorized access.

Recommendations For Aviatrix OpenVPN client versions through 2.5.7, ensure that OpenSSL parameters are not altered from their default settings to prevent potential exploitation. As a temporary workaround, consider restricting modifications to OpenSSL parameters until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.