CyberRota Analysis
AI-GeneratedVMware Avi Load Balancer is vulnerable to a directory traversal attack due to insufficient file path validation, allowing authenticated network users to access unauthorized files on the server. This high-severity flaw (CVSS 8.8) could lead to data exposure or manipulation, making it critical for organizations using affected versions to prioritize patching to the latest releases. Users running versions 30.1.1 through 32.1.1 should urgently update to mitigate potential risks.
Original NVD Description
VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)