medium5.3
CVE-2020-13413
An issue was discovered in Aviatrix Controller before 5.4.1204.
Impact
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatrix | Controller | before 5.4.1204 |
| Aviatrix | Vpn Client | Version 2.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.aviatrix.com/HowTos/security_bulletin_article.html#observable-response-discrepancy-from-api
- https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
- https://docs.aviatrix.com/HowTos/security_bulletin_article.html#observable-response-discrepancy-from-api
- https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/