CVE Vulnerabilities

CVE-2021-25692

Cleartext Storage of Sensitive Information

Published: Apr 06, 2021 | Modified: Nov 21, 2024
CVSS 3.x
4.6
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Sensitive smart card data is logged in default INFO logs by Teradicis PCoIP Connection Manager and Security Gateway prior to version 21.01.3.

Weakness

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Affected Software

Name Vendor Start Version End Version
Pcoip_connection_manager_and_security_gateway Teradici 20.07 (including) 20.07.1 (excluding)
Pcoip_connection_manager_and_security_gateway Teradici 21.01 (including) 21.01.3 (excluding)

Potential Mitigations

References