Information disclosure

2020-08-1119:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure.

CPENameOperatorVersion
graphics_agentlt20.04.1
pcoip_standard_agentlt20.04.1

CPE	Name	Operator	Version
	graphics_agent	lt	20.04.1
	pcoip_standard_agent	lt	20.04.1

References

advisory.teradici.com/security-advisories/60/