CVE-2020-13174

2020-08-1117:31:57

CWE-1021

Teradici

www.cve.org

teradici management

web server

x-frame-options

clickjacking

EPSS

0.001

Percentile

33.8%

JSON

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.

CNA Affected

[
  {
    "product": "- Management Console",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "20.04 and 20.01.1"
      }
    ]
  }
]

References

advisory.teradici.com/security-advisories/58/

EPSS

0.001

Percentile

33.8%

JSON

Related for CVELIST:CVE-2020-13174