Medium severity5.3NVD Advisory· Published May 22, 2020· Updated Jun 17, 2026
CVE-2020-13413
CVE-2020-13413
Description
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
Affected products
4cpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*range: <5.4.1204
- (no CPE)range: <5.4.1204
- cpe:2.3:a:aviatrix:vpn_client:2.8.2:*:*:*:*:*:*:*
- Aviatrix/Controllerdescription
Patches
Vulnerability mechanics
References
2- www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/nvdExploitThird Party Advisory
- docs.aviatrix.com/HowTos/security_bulletin_article.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.