Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux

Summary

An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system.

Remediation

1. Inventory every Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US