CVE-2020-13173

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*
cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*

History

12 Jul 2022, 17:42

Type Values Removed Values Added
CWE CWE-269 CWE-362

Information

Published : 2020-05-28 22:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-13173

Mitre link : CVE-2020-13173

CVE.ORG link : CVE-2020-13173


JSON object : View

Products Affected

teradici

  • pcoip_standard_agent
  • pcoip_graphics_agent
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')