Design/Logic Flaw

2020-08-1118:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.

CPENameOperatorVersion
pcoip_management_consoleeq20.01.1
pcoip_management_consoleeq20.04

CPE	Name	Operator	Version
	pcoip_management_console	eq	20.01.1
	pcoip_management_console	eq	20.04

References

advisory.teradici.com/security-advisories/58/