PT-2021-16763 · Teradici · Teradici Pcoip Soft Client

Published 2021-07-21 · Updated 2021-07-30 · CVE-2021-25699

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Teradici PCoIP Software Client versions prior to 21.07.0

Description The issue allows an attacker to elevate privileges of the running process by placing a specially crafted dll in a build configuration directory, due to the OpenSSL component being compiled without the no-autoload-config option.

Recommendations For versions prior to 21.07.0, update to version 21.07.0 or later to resolve the issue.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2021-25699

Affected Products

Teradici Pcoip Soft Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-25699 · Security Note
• https://advisory.teradici.com/security-advisories/102 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25699 · Vendor Advisory