Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-13414 1 Aviatrix 2 Controller, Gateway 2024-11-21 7.5 High
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
CVE-2020-13413 1 Aviatrix 2 Controller, Vpn Client 2024-11-21 5.3 Medium
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
CVE-2020-13412 1 Aviatrix 1 Controller 2024-11-21 8.8 High
An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF.