PT-2020-16456
CVE-2020-26553
·
Published
2020-11-17
·
Updated
2020-11-23
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Aviatrix Controller versions prior to R6.0.2483
Description
An issue was discovered in the Aviatrix Controller where several APIs contain functions that allow arbitrary files to be uploaded to the web tree.
Recommendations
For versions prior to R6.0.2483, update to version R6.0.2483 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected APIs to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾