VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 11, 2020· Updated Jun 17, 2026

CVE-2020-13175

CVE-2020-13175

Description

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.

Affected products

4
  • Teraway/Cloud Access Connector2 versions
    cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*range: <=15
    • (no CPE)range: <=v15
  • Teraway/Cloud Access Connector Legacy2 versions
    cpe:2.3:a:teradici:cloud_access_connector_legacy:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:teradici:cloud_access_connector_legacy:*:*:*:*:*:*:*:*range: <2020-04-20
    • (no CPE)range: <April 20, 2020

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.