PT-2020-16454

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.3.1151 Description An issue was discovered where encrypted key values are stored in a readable file. Recommendations For Aviatrix Controller versions prior to R5.3.1151, update to version R5.3.1151 or...

Aviatrix Systems Controller 安全漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An encryption key plaintext storage vulnerability exists in Aviatrix Controller versions prior to R5.3.1151. An attacker can exploit this vulnerability to obtain plaintext...

CVE-2020-26549: Files or Directories Accessible to External Parties

An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading...

CVE-2020-26550: Use of Insufficiently Random Values

An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a three-character key...

CVE-2020-26553: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree...

PT-2020-16456

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R6.0.2483 Description An issue was discovered in the Aviatrix Controller where several APIs contain functions that allow arbitrary files to be uploaded to the web tree. Recommendations For versions prior t...

PT-2020-16453

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.3.1151 Description An issue was discovered in Aviatrix Controller where an encrypted file containing credentials to unrelated systems is protected by a three-character key. Recommendations For Aviatrix...

Aviatrix Systems Controller 安全漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. A security vulnerability exists in Aviatrix Controller versions prior to R5.3.1151. The vulnerability stems from a weak key in an encrypted file containing credentials. No...

Aviatrix Systems Controller 加密问题漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An improper access control vulnerability exists in Aviatrix Controller versions prior to R6.0.2483. The vulnerability stems from the fact that multiple executables...

Aviatrix Systems Controller 安全漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An htaccess security control bypass vulnerability exists in Aviatrix Controller versions prior to R5.4.1290. An attacker can exploit this vulnerability to download files...

Aviatrix Systems Controller 代码问题漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An arbitrary file upload vulnerability exists in Aviatrix Controller versions prior to R6.0.2483. The vulnerability stems from several APIs that contain functionality that...

CVE-2020-26551: Cleartext Storage of Sensitive Information

An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file...

PT-2020-16451

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.4.1290 Description An issue was discovered in Aviatrix Controller where there is an insecure sudo rule, allowing a user to execute all commands as any user on the system. Recommendations For Aviatrix...

Aviatrix VPN Client Code Execution Vulnerability

Aviatrix VPN Client is a VPN Virtual Private Network client application that provides SAML authentication. A security vulnerability exists in Aviatrix VPN Client versions prior to 2.10.7. An attacker can exploit the vulnerability to execute code...

Aviatrix Systems Controller Data Forgery Issue Vulnerability

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A security vulnerability exists in Aviatrix Systems Controller 5.1 and prior versions. The vulnerability can be exploited by an attacker to...

Aviatrix Systems Controller Information Disclosure Vulnerability (CNVD-2020-31575)

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A security vulnerability exists in Aviatrix Systems Controller prior to version 5.4.1204 that stems from a discrepancy in the response from th...

Aviatrix Systems Controller Cross-Site Request Forgery Vulnerability

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A cross-site request forgery vulnerability exists in Aviatrix Systems Controller versions prior to 5.4.1204. The vulnerability stems from a WE...

Aviatrix Systems Controller Cross-Site Request Forgery Vulnerability (CNVD-2020-31578)

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A cross-site request forgery vulnerability exists in Aviatrix Systems Controller versions prior to 5.4.1066, which stems from calling an API...

Aviatrix Systems Controller Information Disclosure Vulnerability

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. An information disclosure vulnerability exists in Aviatrix Systems Controller versions prior to 5.4.1204. A remote attacker could exploit this...

CVE-2020-13417

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters...