{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T03:39:43.796","vulnerabilities":[{"cve":{"id":"CVE-2020-13185","sourceIdentifier":"security@teradici.com","published":"2021-02-11T18:15:14.020","lastModified":"2024-11-21T05:00:49.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials."},{"lang":"es","value":"Determinadas páginas de aplicaciones web en la sección autenticada de Teradici Cloud Access Connector anterior a versión v18 eran accesibles sin la necesidad de especificar tokens de autenticación, lo que permitía a un atacante ejecutar funciones sensibles sin credenciales"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@teradici.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teradici:cloud_access_connector:*:*:*:*:*:*:*:*","versionEndExcluding":"18","matchCriteriaId":"7E827E00-C86C-4FE8-9675-54AF19F46D0A"}]}]}],"references":[{"url":"https://advisory.teradici.com/security-advisories/69/","source":"security@teradici.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://advisory.teradici.com/security-advisories/69/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}}]}