CVE-2020-13415

CVE-2020-13415 is a critical XML Signature Wrapping vulnerability affecting Aviatrix Controller versions through 5.1. This flaw allows an unauthenticated attacker to bypass authentication by presenting any signed SAML assertion, even if expired or unauthorized, to establish a connection. The vulnerability carries a CVSS score of 7.5 (High), indicating a network-exploitable issue with low attack complexity and high impact on integrity, as an attacker can gain unauthorized access. There is no user interaction required for a successful exploit. Currently, there is no public exploit code available, nor is there evidence of active exploitation. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.