VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 11, 2020· Updated Jun 17, 2026

CVE-2020-13176

CVE-2020-13176

Description

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.

Affected products

4
  • Teraway/Cloud Access Connector2 versions
    cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*range: <=16
    • (no CPE)range: <=v16
  • Teraway/Cloud Access Connector Legacy2 versions
    cpe:2.3:a:teradici:cloud_access_connector_legacy:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:teradici:cloud_access_connector_legacy:*:*:*:*:*:*:*:*range: <2020-04-24
    • (no CPE)range: <April 24, 2020

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.