Hardcoded credentials

2020-08-1118:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.6%

JSON

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded paths for certain Windows binaries, which allows an attacker to gain elevated privileges via execution of a malicious binary placed in the system path.

CPENameOperatorVersion
graphics_agentlt20.04.1
pcoip_standard_agentlt20.04.1

CPE	Name	Operator	Version
	graphics_agent	lt	20.04.1
	pcoip_standard_agent	lt	20.04.1

References

advisory.teradici.com/security-advisories/60/