CVE-2020-13175
High
Description
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTeradici Cloud Access Connector
PublishedAug 11, 2020
First seenAug 11, 2020
Weakness typeCWE-98CWE-98
How to fix
Update
- teradici cloud_access_connector_legacy2020-04-20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teradici cloud_access_connector | v ≤ 15 | — |
| teradici cloud_access_connector_legacy | v < 2020-04-20 | 2020-04-20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.