CVE-2020-13175 Vulnerability Details

  /     /     /  

CVE-2020-13175 Metadata Quick Info

CVE Published: 11/08/2020 | CVE Updated: 04/08/2024 | CVE Year: 2020
Source: Teradici | Vendor: n/a | Product: - Cloud Access Connector - Cloud Access Connector Legacy
Status : PUBLISHED

---

CVE-2020-13175 Description

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-98
CWE Name: Local File Inclusion (CWE-98)
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).