CVE-2020-13415

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions through 5.1

Description An issue allows an attacker with any signed SAML assertion from the Identity Provider to establish a connection, even if the SAML assertion has expired or is from a user who is not authorized to access Aviatrix. This issue is related to XML Signature Wrapping.

Recommendations For Aviatrix Controller versions through 5.1, update to a version that addresses the XML Signature Wrapping issue to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.