PT-2020-16456
CVE-2020-26553
·
تاريخ النشر
2020-11-17
·
تاريخ التحديث
2020-11-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Aviatrix Controller versions prior to R6.0.2483
Description
An issue was discovered in the Aviatrix Controller where several APIs contain functions that allow arbitrary files to be uploaded to the web tree.
Recommendations
For versions prior to R6.0.2483, update to version R6.0.2483 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected APIs to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾