CVE-2020-13185
Summary
| CVE | CVE-2020-13185 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-11 18:15:00 UTC |
| Updated | 2021-02-25 22:24:00 UTC |
| Description | Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Teradici | Cloud Access Connector | All | All | All | All |
| Application | Teradici | Cloud Access Connector | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Teradici Security Advisories | | MISC | advisory.teradici.com | Release Notes, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.