CVE-2020-13176
Medium
Description
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
SeverityMedium
CVSS6.1
Exploit probability—
ProductTeradici Cloud Access Connector
PublishedAug 11, 2020
First seenAug 11, 2020
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- teradici cloud_access_connector_legacy2020-04-24 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teradici cloud_access_connector | v ≤ 16 | — |
| teradici cloud_access_connector_legacy | v < 2020-04-24 | 2020-04-24 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.