CVE-2020-10965

The vulnerability affects Teradici PCoIP Management Console versions 19.11.1 through 20.01.0. It allows unauthenticated password resets via the login/resetadminpassword endpoint for the default admin account, only when that account is not disabled. A fix is available in 19.11.2 and 20.01.1. Remed...

CVE-2017-20121

CVE-2017-20121 affects Teradici Management Console 2.2.0, specifically the unknown functionality in the Database Management component. The root cause is described as manipulation that leads to improper privilege management, enabling a local attacker to launch the attack on the host. Publicized ex...

CVE-2020-13174

The CVE-2020-13174 entry affects the Teradici Management Console, specifically the web server in versions 20.04 and 20.01.1. The root cause is that the X-Frame-Options HTTP header was not properly set, enabling clickjacking or UI redress attacks by tricking users into clicking malicious links. Co...

CVE-2021-35451

Affected product: Teradici PCoIP Management Console-Enterprise 20.07.0. Vulnerability: Cross-Site Scripting (XSS) in the Web application component that allows an unauthenticated user to inject arbitrary text into a user’s browser. Impact: The provided documents describe the XSS impact as injectio...

CVE-2020-13183

Teradici PCoIP Management Console is affected by a reflected Cross-Site Scripting vulnerability (CVE-2020-13183) in versions prior to 20.07. The issue stems from insufficient input validation in the web application, allowing an attacker to hijack a user’s active session if a victim loads a malici...