ZeroHour

CVE-2020-13185

CVSS 3.1
6.5 medium
EPSS
1%p61
Published
()
Modified
Description

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

Vendors
teradici
Products
cloud access connector
Weakness
CWE-288, CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.