Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.
References
Link | Resource |
---|---|
https://advisory.teradici.com/security-advisories/69/ | Release Notes Vendor Advisory |
Configurations
History
19 Feb 2021, 17:07
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:* | |
CWE | CWE-287 | |
References | (MISC) https://advisory.teradici.com/security-advisories/69/ - Release Notes, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.5 |
11 Feb 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-02-11 18:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-13185
Mitre link : CVE-2020-13185
CVE.ORG link : CVE-2020-13185
JSON object : View
Products Affected
teradici
- cloud_access_connector