description: The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
problem types: Cross-Site Scripting (XSS) (CWE-79)
affected:
{
product: - Cloud Access Connector - Cloud Access Connector Legacy
vendor: n/a
versions:
status: affected, version: Cloud Access Connector Legacy prior to April 24, 2020, Cloud Access Connector, v16 and earlier)
}