CVE-2020-26548

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.4.1290

Description An issue was discovered in Aviatrix Controller where there is an insecure sudo rule, allowing a user to execute all commands as any user on the system.

Recommendations For Aviatrix Controller versions prior to R5.4.1290, update to version R5.4.1290 or later to resolve the issue. As a temporary workaround, consider restricting the sudo privileges of the vulnerable user to minimize the risk of exploitation.