CVE-2020-13416

An issue was discovered in Aviatrix Controller before 5.4.1066

published May 22, 2020

CVSS
—
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Published
2020-05-22T20:48Z
EPSS history
Timeline
  • 22 MAY 20:48Z
    An issue was discovered in Aviatrix Controller before 5.4.1066
    cvelistv5