CVE-2021-25698

2021-07-2112:26:55

CWE-426

Teradici

www.cve.org

0.001 Low

EPSS

Percentile

27.4%

JSON

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.

CNA Affected

[
  {
    "product": "- PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "21.07.0"
      }
    ]
  }
]

References

advisory.teradici.com/security-advisories/102/

0.001 Low

EPSS

Percentile

27.4%

JSON

Related for CVELIST:CVE-2021-25698