CVE-2020-13414

概要

参考情報

• docs.aviatrix.com/HowTos/security_bulletin_article.html · Vendor Advisory
• criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix · Exploit

controller のその他の脆弱性

• CVE-2024-50603緊急 9.8悪用確認済み（CISA KEV）An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elem…
• CVE-2021-40870緊急 9.8悪用確認済み（CISA KEV）An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, wh…
• CVE-2020-27568高 7.5Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller r…
• CVE-2020-26553緊急 9.8An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to…
• CVE-2020-26552高 7.5An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a v…