CVE-2020-13185

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-11 · updated 2026-06-17
Weakness: CWE-288

Description

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.

Affected products

- Cloud Access Connector - Cloud Access Connector Legacy: before 18 — fixed in 18

How to fix

Upgrade to a fixed version: - Cloud Access Connector - Cloud Access Connector Legacy 18. Check the vendor advisory for mitigations.

References

https://advisory.teradici.com/security-advisories/69/
https://advisory.teradici.com/security-advisories/69/

Get alerted when CVE-2020-13185 or the next vulnerability affects your stack