CVE-2020-13185CWE-288

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify…

published February 11, 2021

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01004 · 62.6th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2021-02-11T15:10Z
EPSS history
Timeline
  • 11 FEB 15:10Z
    Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify…
    cvelistv5