PT-2020-13373 · Teradici · Teradici Management Console

Published 2020-08-11 · Updated 2022-09-02 · CVE-2020-13174

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Teradici Management console versions 20.04 and 20.01.1

Description The web server in the Teradici Management console did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.

Recommendations For version 20.04, update the X-Frame-Options HTTP header to prevent clickjacking attacks. For version 20.01.1, update the X-Frame-Options HTTP header to prevent clickjacking attacks.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2020-13174

Affected Products

Teradici Management Console

References · 6

• https://osv.dev/vulnerability/CVE-2020-13174 · Vendor Advisory
• https://advisory.teradici.com/security-advisories/58 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13174 · Security Note
• https://t.me/cibsecurity/14051 · Telegram Post
• https://t.me/cvenotify/32801 · Telegram Post
• https://t.me/cvenotify/35645 · Telegram Post