Non notée
CVE-2020-13176 The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior…
Description
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| - Cloud Access Connector - Cloud Access Connector Legacy | Versions non publiées |
Autres CVE de - Cloud Access Connector - Cloud Access Connector Legacy
Les 4 CVE de - Cloud Access Connector - Cloud Access Connector Legacy →
CVE-2020-13186
An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web…
Non notée
CVE-2020-13185
Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were…
Non notée
CVE-2020-13175
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior…
Non notée