CVE-2021-25692

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Apr 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-256937.5An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer dereference.CVE-2021-256947.8Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixelsCVE-2021-256957.8The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attackCVE-2021-256987.8The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, whicCVE-2021-256997.8The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, whiCVE-2021-257015.5The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety CVE-2021-257356.5A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only CVE-2021-257366.3Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBaCVE-2021-257374.8A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes alrCVE-2021-257386.7Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.CVE-2021-257403.1A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have aCVE-2021-257418.1A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & di
CVE-2021-25692: Medium severity, CVSS 4.6 | Vulnix