PT-2021-9565
CVE-2020-13185
·
تاريخ النشر
2021-02-11
·
تاريخ التحديث
2021-02-25
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Teradici Cloud Access Connector versions prior to 18
Description
The issue allows certain web application pages in the authenticated section to be accessed without specifying authentication tokens. This enables an attacker to execute sensitive functions without credentials.
Recommendations
For versions prior to 18, update to version 18 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾