CVE Vulnerability

CVE-2020-13179

Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://advisory.teradici.com/security-advisories/60/ Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:teradici:graphics_agent:*:*:*:*:*:windows:*:*
cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*
Information

Published : 2020-08-11 07:15

Updated : 2021-11-04 04:10

NVD link : CVE-2020-13179

Mitre link : CVE-2020-13179

Products Affected

Pcoip Standard Agent

Teradici

CWE
CWE-212