high7.5
CVE-2020-13415
An issue was discovered in Aviatrix Controller through 5.1.
Impact
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatrix | Controller | through 5.1 |