CVE-2020-13173

The CVE affects Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows, versions 19.11.1 and earlier. It arises from the initialization of pcoip_credential_provider which creates an insecure named pipe, enabling an attacker to intercept sensitive information or potentially...

CVE-2021-25698

Summary: CVE-2021-25698 affects the OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0. The issue arises because the component was compiled without the no-autoload-config option, enabling a local attacker to escalate privileges by placing a specially crafted DLL in a ...

CVE-2019-20362

The Red Hat and NVD records describe CVE-2019-20362 in Teradici PCoIP Agent (before 19.08.1) and PCoIP Client (before 19.08.3). Root cause: an unquoted service path can cause the system to execute %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe. Affecte...

CVE-2020-13179

The CVE-2020-13179 vulnerability affects Teradici PCoIP Standard Agent for Windows and Teradici PCoIP Graphics Agent for Windows prior to version 20.04.1. The root cause is that Broker Protocol messages are not cleaned up from server memory, which may allow an attacker to read confidential inform...

CVE-2020-13177

CVE-2020-13177 affects the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows, with affected versions prior to 20.04.1 and 20.07.0. The root cause is that the support bundler does not use hard-coded paths for certain Windows binaries, allowing an attacker with local access t...

CVE-2021-25688

Teradici PCoIP Agents for Windows (before 20.10.0) and Linux (before 21.01.0) may log parts of a user’s password in application logs under certain conditions. The issue, confirmed across multiple feeds (NVD/Red Hat/CVE records), is a local-access vulnerability with partial confidentiality impact....

CVE-2020-13178

The CVE-2020-13178 entry affects Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows, with the issue present in versions prior to 20.04.1. The underlying root cause is improper validation of the signature of an external binary, which could allow an attacker to achieve elevate...