Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Aviatrix Systems Controller 跨站请求伪造漏洞
Vulnerability Description
Aviatrix Systems Controller是美国Aviatrix Systems公司的一款用于Aviatrix Systems解决方案的业务流程和管理的集中控制面板。 Aviatrix Systems Controller 5.4.1066之前版本中存在跨站请求伪造漏洞，该漏洞源于在调用API时，不需要Controller Web Interface会话令牌参数。攻击者可利用该漏洞重置密码。
CVSS Information
N/A
Vulnerability Type
N/A