The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13175
Reference (s):
- https://advisory.teradici.com/security-advisories/59/
- URL: https://advisory.teradici.com/security-advisories/59/