CVE-2020-26549

creationtimestamp| type| source ---|---|--- 2020-11-18 00:39:29+00:00| seen| https://t.me/cibsecurity/16482 2020-12-09 04:25:31+00:00| seen| https://t.me/cibsecurity/17366...

CVE-2020-26549

An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading...

CVE-2020-26549

CVE-2020-26549 affects Aviatrix Controller prior to R5.4.1290. The vulnerability arises from an htaccess protection mechanism that prevents requests to directories, which can be bypassed to download files beyond a user’s rights. Documented impact in CNVD/NVD entries: an attacker could download re...