CVE-2020-26548

2020-11-1720:22:46

mitre

www.cve.org

aviatrix controller

insecure sudo rule

unauthorized user

execute commands

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can execute all commands as any user on the system.

References

www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/