VMware Avi Load Balancer Unauthenticated Blind SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in VMware Avi Load Balancer, affecting versions 30.1.1, 30.1.2, 30.2.1, and 30.2.2. This vulnerability allows a malicious user with network access to execute specially crafted SQL queries, potentially leading to unauthorized database access. The issue has been assigned a CVSSv3 base score of 8.6, indicating a high severity level.

Impact

Exploitation of this vulnerability could allow for unauthorized database access through the execution of malicious SQL queries.

Remediation

Users can upgrade to VMware Avi Load Balancer versions 30.1.2, 30.2.1, or 30.2.2 to address this vulnerability. Version 30.1.1 must be upgraded to 30.1.2 or later before the patch can be applied.