CVE-2020-13176
11.08.2020, 18:15
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
| Vendor | Product | Version |
|---|---|---|
| teradici | cloud_access_connector | 𝑥 ≤ 16 |
| teradici | cloud_access_connector_legacy | 𝑥 < 2020-04-24 |
𝑥
= Vulnerable software versions