PT-2021-9565

CVE-2020-13185

·

Published

2021-02-11

·

Updated

2021-02-25

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to 18
Description The issue allows certain web application pages in the authenticated section to be accessed without specifying authentication tokens. This enables an attacker to execute sensitive functions without credentials.
Recommendations For versions prior to 18, update to version 18 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions until the update is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾