CVE-2020-13179
Medium
Description
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure.
SeverityMedium
CVSS5.5
Exploit probability23. percentile0.3%
ProductTeradici Graphics Agent
PublishedAug 11, 2020
First seenAug 11, 2020
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- teradici graphics_agent20.04.1 or later
- teradici pcoip_standard_agent20.04.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teradici graphics_agent | v < 20.04.1 | 20.04.1 |
| teradici pcoip_standard_agent | v < 20.04.1 | 20.04.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.