Vulnerability Description
The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Loadbalancer | Enterprise Va Max | <= 8.3.8 |
Related Weaknesses (CWE)
References
- https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancExploitThird Party Advisory
- https://www.loadbalancer.org/products/virtual/enterprise-va-max/Product
- https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancExploitThird Party Advisory
- https://www.loadbalancer.org/products/virtual/enterprise-va-max/Product
FAQ
What is CVE-2020-13377?
CVE-2020-13377 is a vulnerability with a CVSS score of 8.1 (HIGH). The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and ...
How severe is CVE-2020-13377?
CVE-2020-13377 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-13377?
Check the references section above for vendor advisories and patch information. Affected products include: Loadbalancer Enterprise Va Max.