description: The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
problem types: Local File Inclusion (CWE-98)
affected:
{
product: - Cloud Access Connector - Cloud Access Connector Legacy
vendor: n/a
versions:
status: affected, version: Cloud Access Connector Legacy prior to April 20, 2020, Cloud Access Connector v15 and earlier
}