Security Advisory
CVE-2020-13415
7.5
HIGH
Vulnerability Description
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
Published Date
May 22, 2020
Official Source
NIST NVD Advisory