CVE-2021-25692
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager...
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
- Record
CVE-2021-25692- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-312
- Updated
- 2026-11-02
CVE List No score
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
- Record
CVE-2021-25692- Updated
- 2026-11-02
EUVDEUVD-2021-12584 No score
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
- Record
EUVD-2021-12584- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vxm7-h9hr-qr3w No score
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager...
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
- Record
GHSA-vxm7-h9hr-qr3w- Weakness
- CWE-312
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-25692 is a medium vulnerability (CVSS 4.6) in Teradici Pcoip Connection Manager And Security Gateway, published April 6, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. No source names a fixed version.