CVE-2020-13174

State: Published
Severity: Not scored
Published: Aug 11, 2020
Updated: Aug 4, 2024
Reserved: May 19, 2020

Description

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.

Scores

The record has no CVSS score.

Weaknesses

CWE-1021 Clickjacking (CWE-1021)

Affected Products

Product	Versions
- Management Consolen/a	20.04 and 20.01.1Affected

References

https://advisory.teradici.com/security-advisories/58/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.