Vulnerabilities > CVE-2020-26549 - Files or Directories Accessible to External Parties vulnerability in Aviatrix Controller 5.3.1516
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |