Vulnerability · Published Aug 11, 2020 · Assigned by Teradici
CVE-2020-13175
High 7.5
In plain English
A high-severity security flaw in - Cloud Access Connector - Cloud Access Connector Legacy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.7%top 23.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | - Cloud Access Connector - Cloud Access Connector Legacy | Cloud Access Connector Legacy prior to April 20, 2020, Cloud Access Connector v15 and earlier |
Weakness: CWE-98
References
- https://advisory.teradici.com/security-advisories/59/ x_refsource_MISC