Browse CVEs

HIGH 7.5 CVE-2020-27568 Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. … Controller Mitigation only Fix from $1,9502021-04-21 CRITICAL 9.8 CVE-2020-26553 An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web … Controller No fix yet Fix from $2,3002020-11-17 HIGH 8.8 CVE-2020-26548 An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can execute all commands as any u… Controller No fix yet Fix from $1,9502020-11-17 HIGH 7.5 CVE-2020-26549 An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed… Controller No fix yet Fix from $1,9502020-11-17 HIGH 7.5 CVE-2020-26550 An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a thre… Controller No fix yet Fix from $1,9502020-11-17 HIGH 7.5 CVE-2020-26551 An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file. Controller No fix yet Fix from $1,9502020-11-17 HIGH 7.5 CVE-2020-26552 An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid sess… Controller No fix yet Fix from $1,9502020-11-17