CVE-2020-13186CWE-352

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with…

published February 11, 2021

CVSS
—
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-02-11T15:14Z
EPSS history
Timeline
  • 11 FEB 15:14Z
    An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with…
    cvelistv5