{"containers": {"cna": {"affected": [{"product": "- Cloud Access Connector - Cloud Access Connector Legacy", "vendor": "n/a", "versions": [{"status": "affected", "version": "v18 and earlier"}]}], "descriptions": [{"lang": "en", "value": "Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-288", "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-02-11T15:10:16", "orgId": "ba3c294d-a544-4fff-ad44-2de7c7bbb6be", "shortName": "Teradici"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://advisory.teradici.com/security-advisories/69/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@teradici.com", "ID": "CVE-2020-13185", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "- Cloud Access Connector - Cloud Access Connector Legacy", "version": {"version_data": [{"version_value": "v18 and earlier"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-288: Authentication Bypass Using an Alternate Path or Channel"}]}]}, "references": {"reference_data": [{"name": "https://advisory.teradici.com/security-advisories/69/", "refsource": "MISC", "url": "https://advisory.teradici.com/security-advisories/69/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T12:11:19.426Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://advisory.teradici.com/security-advisories/69/"}]}]}, "cveMetadata": {"assignerOrgId": "ba3c294d-a544-4fff-ad44-2de7c7bbb6be", "assignerShortName": "Teradici", "cveId": "CVE-2020-13185", "datePublished": "2021-02-11T15:10:16", "dateReserved": "2020-05-19T00:00:00", "dateUpdated": "2024-08-04T12:11:19.426Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E827E00-C86C-4FE8-9675-54AF19F46D0A", "versionEndExcluding": "18", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials."}, {"lang": "es", "value": "Determinadas p\u00e1ginas de aplicaciones web en la secci\u00f3n autenticada de Teradici Cloud Access Connector anterior a versi\u00f3n v18 eran accesibles sin la necesidad de especificar tokens de autenticaci\u00f3n, lo que permit\u00eda a un atacante ejecutar funciones sensibles sin credenciales"}], "id": "CVE-2020-13185", "lastModified": "2021-02-25T22:24:13.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-02-11T18:15:14.020", "references": [{"source": "security@teradici.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://advisory.teradici.com/security-advisories/69/"}], "sourceIdentifier": "security@teradici.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-288"}], "source": "security@teradici.com", "type": "Secondary"}]}

{}