What is CVE-2020-13377?

CVE-2020-13377 is a high-severity vulnerability affecting the web-services interface of Loadbalancer.org Enterprise VA MAX through version 8.3.8. The issue impacts various systems running affected versions of Loadbalancer.org Enterprise VA MAX, which is designed for high-performance and complex environments.

Who is impacted by CVE-2020-13377?

This high-severity vulnerability allows an authenticated, remote attacker with low privileges to gain read and write access to sensitive files through a directory traversal attack. It is important for users of the affected software to be aware of this vulnerability and its potential impact on their systems.

What should I do if I’m affected?

If you're affected by the CVE-2020-13377 vulnerability, it's crucial to take action to protect your systems. Verify if your Loadbalancer.org Enterprise VA MAX version is up to and including 8.3.8. Contact Loadbalancer.org for guidance on available patches or updates. Follow their instructions to apply the necessary updates or patches to your system. Regularly monitor your system for any signs of unauthorized access or suspicious activity.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2020-13377 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-22, which involves improper limitation of a pathname, allowing directory traversal attacks.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below.

• Inf0seq

• Loadbalancer.org