7.8high
CVE-2017-20121
Teradici Management Console Database Management privileges management
Published 4 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 33%
Public exploits
0
none known
Summary
A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CISA SSVC assessment
- Exploitation
- Proof of concept public
- Automatable
- no
- Technical impact
- total
- Assessed
- 18 mo ago
Exploit prediction (EPSS)
0.39% probability of exploitation in the next 30 days, higher than 33% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Teradici Management Console
Classification
- Weakness
- CWE-269 Improper Privilege Management
References
- seclists.org /fulldisclosure/2017/Feb/62 · x_refsource_MISC, x_transferred
- vuldb.com /?id.97279 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2017-20121
- NVD: CVE-2017-20121
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.