CVE-2020-26552: High severity aviatrix controllers vulnerability

Published Nov 17, 2020

Updated

An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid session ID for access.

Affected Software

1 affected component

Aviatrix Controller=5.3.1516

Event History

Nov 17, 2020

CVE Published

via MITRE·08:58 PM

Data Sourced

via MITRE·08:58 PM

Description

Frequently Asked Questions

What is CVE-2020-26552?

CVE-2020-26552 is a vulnerability discovered in Aviatrix Controller before R6.0.2483 where multiple executable files do not require a valid session ID for access.

What is the severity of CVE-2020-26552?

The severity of CVE-2020-26552 is high with a CVSSv3 score of 7.5.

Which version of Aviatrix Controller is affected by CVE-2020-26552?

Aviatrix Controller version 5.3.1516 is affected by CVE-2020-26552.

How can I fix CVE-2020-26552?

To fix CVE-2020-26552, upgrade to Aviatrix Controller version R6.0.2483 or later.

Where can I find more information about CVE-2020-26552?

You can find more information about CVE-2020-26552 at the following link: [https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/](https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/)