CVE-2021-25688: 
Teradici PCoIP Graphics Agent vulnerability analysis and mitigation

Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21.01.0 may log parts of a user's password in the application logs (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified as CWE-532: Insertion of Sensitive Information into Log File. The issue affects multiple versions of PCoIP Agents including PCoIP Graphics Agent and PCoIP Standard Agent for both Windows and Linux platforms (NVD).

The vulnerability could lead to exposure of sensitive authentication information, as parts of user passwords may be written to application logs. This could potentially allow attackers with access to log files to obtain partial password information (NVD).

The vulnerability requires local access and low privileges to exploit. No user interaction is needed for exploitation once an attacker has the required access (NVD).

Users should upgrade to Teradici PCoIP Agents for Windows version 20.10.0 or later, or Teradici PCoIP Agents for Linux version 21.01.0 or later which contain fixes for this vulnerability (NVD).