CVE-2020-13185

2021-02-1115:10:16

CWE-288

Teradici

www.cve.org

teradici cloud access connector

web application

authentication tokens

attacker

sensitive functions

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

CNA Affected

[
  {
    "product": "- Cloud Access Connector - Cloud Access Connector Legacy",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v18 and earlier"
      }
    ]
  }
]

References

advisory.teradici.com/security-advisories/69/