CVE-2020-13185

Summary

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

Affected Software

VendorProductVersion RangeStatus
n/a- Cloud Access Connector - Cloud Access Connector Legacyv18 and earlieraffected

Weaknesses

  • CWE-288: CWE-288: Authentication Bypass Using an Alternate Path or Channel

ADP Enrichment

CVE Program Container

Additional References

References