What is CVE-2020-13185?

CVE-2020-13185 is a medium-severity vulnerability in Teradici Cloud Access Connector, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 6.5/10. Published 2021-02-11.

How severe is CVE-2020-13185?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Teradici Cloud Access Connector

CVE-2020-13185

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Teradici Cloud_access_connector
N/a - Cloud Access Connector Legacy — versions v18 and earlier

Weakness classification (CWE)

References

security@teradici.com (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2020-13185?: CVE-2020-13185 is a medium-severity vulnerability in Teradici Cloud Access Connector, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 6.5/10. Published 2021-02-11.
How severe is CVE-2020-13185?: Medium severity. CVSS v3 base score is 6.5 out of 10.