Sensitive smart card data is logged in default INFO logs by Teradicis PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pcoip_connection_manager_and_security_gateway | Teradici | 20.07 (including) | 20.07.1 (excluding) |
| Pcoip_connection_manager_and_security_gateway | Teradici | 21.01 (including) | 21.01.3 (excluding) |