« Volver al listado

CVE-2021-25692

Estado: ModificadaMedia (4.6)—

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Teradici — Pcoip Connection Manager AND Security Gateway

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-25692",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@teradici.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Teradici PCoIP Connection Manager and Security Gateway",
          "versions": [
            {
              "status": "affected",
              "version": "prior to version 21.01.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-06T20:15:13.583",
  "references": [
    {
      "url": "https://advisory.teradici.com/security-advisories/77/",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@teradici.com"
    },
    {
      "url": "https://advisory.teradici.com/security-advisories/77/",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3."
    },
    {
      "lang": "es",
      "value": "Los datos confidenciales de la tarjeta inteligente son se registran en los registros INFO predeterminados por PCoIP Connection Manager y Security Gateway de Teradici versiones anteriores a 21.01.3"
    }
  ],
  "lastModified": "2026-06-17T03:42:21.813",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:teradici:pcoip_connection_manager_and_security_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED6240DB-4DA3-4291-9A26-59CF8115039B",
              "versionEndExcluding": "20.07.1",
              "versionStartIncluding": "20.07"
            },
            {
              "criteria": "cpe:2.3:a:teradici:pcoip_connection_manager_and_security_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EE1BA81-2DC5-4643-B7EB-6FB1921332F8",
              "versionEndExcluding": "21.01.3",
              "versionStartIncluding": "21.01"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@teradici.com"
}