CVE-2021-25699

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-257015.5The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety CVE-2021-257356.5A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only CVE-2021-257366.3Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBaCVE-2021-257374.8A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes alrCVE-2021-257386.7Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.CVE-2021-257403.1A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have aCVE-2021-257418.1A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & diCVE-2021-257427.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature CVE-2021-257433.0kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not lCVE-2021-257458.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[CVE-2021-257467.1A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an CVE-2021-257486.5A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypas
CVE-2021-25699: High severity, CVSS 7.8 | Vulnix