Directory traversal

2021-07-2115:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.

CPENameOperatorVersion
pcoip_standard_agentlt21.07.0

CPE	Name	Operator	Version
	pcoip_standard_agent	lt	21.07.0

References

advisory.teradici.com/security-advisories/102/