Skip to content
Not rated

CVE-2020-13186 An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web…

Description

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link.

Affected products and versions

Product Affected versions Fixed in
- Cloud Access Connector - Cloud Access Connector Legacy Versions not published
The 4 CVEs of - Cloud Access Connector - Cloud Access Connector Legacy →
Track this CVE