PT-2021-9565
CVE-2020-13185
·
Published
2021-02-11
·
Updated
2021-02-25
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Teradici Cloud Access Connector versions prior to 18
Description
The issue allows certain web application pages in the authenticated section to be accessed without specifying authentication tokens. This enables an attacker to execute sensitive functions without credentials.
Recommendations
For versions prior to 18, update to version 18 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾