CVE-2020-27568

Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security.

• CWE-732

• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#insecure-file-permissionsNot Applicable, Vendor Advisory
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#insecure-file-permissionsNot Applicable, Vendor Advisory

Published

Apr 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27555Use of default credentials for the telnet server in BASETech…9.8
• CVE-2020-27556A predictable device ID in BASETech GE-131 BT-1837836 firmwa…5.3
• CVE-2020-27557Unprotected Storage of Credentials vulnerability in BASETech…5.5
• CVE-2020-27558Use of an undocumented user in BASETech GE-131 BT-1837836 fi…6.5
• CVE-2020-2756Vulnerability in the Java SE, Java SE Embedded product of Or…3.7
• CVE-2020-27560ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLay…3.3
• CVE-2020-27569Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and…7.5
• CVE-2020-2757Vulnerability in the Java SE, Java SE Embedded product of Or…3.7
• CVE-2020-27574Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site req…8.8
• CVE-2020-27575Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command inje…8.8
• CVE-2020-27576Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scr…5.4
• CVE-2020-2758Vulnerability in the Oracle VM VirtualBox product of Oracle …8.2