CVE-2020-13415

2020-05-22T21:15:00
ID CVE-2020-13415
Type cve
Reporter cve@mitre.org
Modified 2020-05-26T19:55:00

Description

An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.