CVE-2020-13175

Summary

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.

Affected Software

VendorProductVersion RangeStatus
n/a- Cloud Access Connector - Cloud Access Connector LegacyCloud Access Connector Legacy prior to April 20, 2020, Cloud Access Connector v15 and earlieraffected

Weaknesses

  • CWE-98: Local File Inclusion (CWE-98)

ADP Enrichment

CVE Program Container

Additional References

References