Vulnerabilities > CVE-2020-13945 - Unspecified vulnerability in Apache Apisix

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
apache
NVD
Published: 2020-12-07
Updated: 2024-11-21

Summary

In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.

Vulnerable Configurations

Part Description Count
Application
Apache
5

References