CVE-2020-26552

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R6.0.2483

Description An issue was discovered where multiple executable files implementing API endpoints do not require a valid session ID for access. This affects the Aviatrix Controller.

Recommendations For Aviatrix Controller versions prior to R6.0.2483, update to version R6.0.2483 or later to resolve the issue. As a temporary workaround, consider restricting access to the API endpoints that do not require a valid session ID until a patch is applied.