Lucene search

K
cveVulDBCVE-2017-20121
HistoryJun 30, 2022 - 5:15 a.m.

CVE-2017-20121

2022-06-3005:15:06
CWE-269
VulDB
web.nvd.nist.gov
28
15
cve-2017-20121
teradici management console
vulnerability
privilege management
local attack
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Affected configurations

Nvd
Vulners
Node
teradicipcoip_management_consoleMatch2.2.0
VendorProductVersionCPE
teradicipcoip_management_console2.2.0cpe:2.3:a:teradici:pcoip_management_console:2.2.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Management Console",
    "vendor": "Teradici",
    "versions": [
      {
        "status": "affected",
        "version": "2.2.0"
      }
    ]
  }
]

Social References

More

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

Related for CVE-2017-20121