Cloud Access Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Teradici (0aabe2ad-f9db-575f-bffb-219b1d4d9970) |
|---|---|
| Product | Cloud Access Connector (7103cf12-8e0c-565d-8446-463c7dcf51ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13186 |
vulnerable | 2026-06-03 14:41:36.413628 |
Details available
An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link.
Published: 2021-02-11T15:14:48.000Z
Updated: 2024-08-04T12:11:19.410Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13185 |
vulnerable | 2026-06-03 14:41:36.413312 |
Details available
Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.
Published: 2021-02-11T15:10:16.000Z
Updated: 2024-08-04T12:11:19.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13176 |
vulnerable | 2026-06-03 14:41:36.405609 |
Details available
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
Published: 2020-08-11T17:40:55.000Z
Updated: 2024-08-04T12:11:19.402Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13175 |
vulnerable | 2026-06-03 14:41:36.404132 |
Details available
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
Published: 2020-08-11T17:40:37.000Z
Updated: 2024-08-04T12:11:19.554Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.