CVE-2020-13173
Published May 28, 2020
Last updated 2 years ago
Overview
- Description
- Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
- Source
- security@teradici.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-362
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "E60DA7DF-E802-4CDB-A7CD-C6CE14DE4A35",
"versionEndIncluding": "19.11.1"
},
{
"criteria": "cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "AA6F3560-2CFD-4B73-8800-A9FE3B1AFBBE",
"versionEndIncluding": "19.11.1"
}
],
"operator": "OR"
}
]
}
]