| Package | Affected versions | Patched versions |
|---|---|---|
| controller | ≤ 5.1 |
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free