{"containers": {"cna": {"affected": [{"product": "PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows", "vendor": "n/a", "versions": [{"status": "affected", "version": "19.11.1 and earlier"}]}], "descriptions": [{"lang": "en", "value": "Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe."}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure, Privilege Escalation", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-05-28T21:05:33", "orgId": "ba3c294d-a544-4fff-ad44-2de7c7bbb6be", "shortName": "Teradici"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://advisory.teradici.com/security-advisories/55/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@teradici.com", "ID": "CVE-2020-13173", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows", "version": {"version_data": [{"version_value": "19.11.1 and earlier"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure, Privilege Escalation"}]}]}, "references": {"reference_data": [{"name": "https://advisory.teradici.com/security-advisories/55/", "refsource": "CONFIRM", "url": "https://advisory.teradici.com/security-advisories/55/"}]}}}}, "cveMetadata": {"assignerOrgId": "ba3c294d-a544-4fff-ad44-2de7c7bbb6be", "assignerShortName": "Teradici", "cveId": "CVE-2020-13173", "datePublished": "2020-05-28T21:05:33", "dateReserved": "2020-05-19T00:00:00", "dateUpdated": "2020-05-28T21:05:33", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*", "matchCriteriaId": "E60DA7DF-E802-4CDB-A7CD-C6CE14DE4A35", "versionEndIncluding": "19.11.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*", "matchCriteriaId": "AA6F3560-2CFD-4B73-8800-A9FE3B1AFBBE", "versionEndIncluding": "19.11.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe."}, {"lang": "es", "value": "La inicializaci\u00f3n de pcoip_credential_provider en Teradici PCoIP Standard Agent para Windows y PCoIP Graphics Agent para Windows versiones 19.11.1 y anteriores, crea una tuber\u00eda nombrada de forma no segura, que permite a un atacante interceptar informaci\u00f3n confidencial o posiblemente elevar privilegios mediante la preinstalaci\u00f3n de una aplicaci\u00f3n que obtiene que tuber\u00eda nombr\u00f3."}], "id": "CVE-2020-13173", "lastModified": "2022-07-12T17:42:04.277", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-05-28T22:15:10.803", "references": [{"source": "security@teradici.com", "tags": ["Vendor Advisory"], "url": "https://advisory.teradici.com/security-advisories/55/"}], "sourceIdentifier": "security@teradici.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}