MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2020-13178

CVSS 6.7v3.1pub. 2020-08-11upd. 2024-11-21

A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of an external binary, which could allow an attacker to gain elevated privileges via execution in the context of the PCoIP Agent process.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Teradici Graphics Agent

    APP
    Teradici
    < 20.04.1

  • Teradici Pcoip Standard Agent

    APP
    Teradici
    < 20.04.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-25698HIGH7.8ten sam produkt

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the n...

CVE-2020-13177HIGH7.8ten sam produkt

The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior...

CVE-2020-13173HIGH7.8ten sam produkt

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphic...

CVE-2019-20362HIGH7.8ten sam produkt

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause exe...

CVE-2021-25688MEDIUM5.5ten sam produkt

Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents...