CVE-2020-27568 Misconfiguration in n/a

What is CVE-2020-27568?

CVE-2020-27568 is a high-severity vulnerability in n/a, published on 21 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security.

Weakness: CWE-732

Which versions are affected by CVE-2020-27568?

It affects 1 product.

Products include Aviatrix Controller.

How do I fix CVE-2020-27568?

No fix has been published for CVE-2020-27568 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-27568 being exploited?

There is no known exploitation of CVE-2020-27568 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2024-50603 Aviatrix Controllers OS Command Injection Exploited Critical 10.0
• CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File Exploited Critical 9.8
• CVE-2020-26553 File upload in n/a Critical 9.8
• CVE-2020-13417 Privilege escalation in n/a Critical 9.8
• CVE-2020-26548 Privilege escalation in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5967-3m2h-jxrg.