CVE-2020-11805 Missing authorization in n/a
Attackers can bypass UDP access controls in the Pexip Reverse Proxy and TURN Server, potentially gaining unauthorized network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11805?
CVE-2020-11805 is a critical missing authorization vulnerability in Pexip Pexip Infinity, published on 25 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
Weakness: CWE-20
Which versions are affected by CVE-2020-11805?
It affects 2 products.
Products include Pexip Pexip Infinity, Pexip Reverse Proxy and Turn Server.
How do I fix CVE-2020-11805?
No fix has been published for CVE-2020-11805 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2020-11805 being exploited?
There is no known exploitation of CVE-2020-11805 in the wild and no public exploit code.
Other vulnerabilities in Pexip Pexip Infinity
- CVE-2026-103110 Memory corruption in Infinity
- CVE-2015-4719 Privilege escalation in n/a
- CVE-2017-6551 Other in n/a
- CVE-2026-103105 Missing authorization in Infinity
- CVE-2026-103101 Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to
Sources
Also known as GHSA-8vvq-v9pr-9fqv.