high7.5
CVE-2020-13175
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Clo…
Impact
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teradici | Cloud Access Connector | through 15 |
| Teradici | Cloud Access Connector Legacy | before 2020-04-20 |