CVE-2021-25694
Teradici PCoIP Graphics Agent vulnerability analysis and mitigation

Overview

CVE-2020-25694 is a security vulnerability affecting PostgreSQL database management system that allows reconnection to downgrade connection security settings. The vulnerability was discovered and disclosed in 2020, with fixes released in January 2021 through various Red Hat Enterprise Linux security updates (Red Hat Advisory).

Technical details

The vulnerability affects the PostgreSQL database system's connection handling mechanism. It specifically impacts how security settings are maintained during reconnection attempts, potentially allowing for a downgrade of security parameters. This issue was addressed in PostgreSQL versions 9.6.20, 10.15, and 12.5 through security updates (Red Hat Advisory).

Impact

If exploited, this vulnerability could allow an attacker to downgrade security settings during connection attempts to PostgreSQL databases, potentially compromising the security of database connections (Red Hat Advisory).

Mitigation and workarounds

The vulnerability has been patched in multiple PostgreSQL versions. Users are advised to upgrade to PostgreSQL versions 9.6.20, 10.15, or 12.5 or later. For Red Hat Enterprise Linux users, security updates are available through RHSA-2021:0165, RHSA-2021:0166, and RHSA-2021:0167 advisories (Red Hat Advisory).

Additional resources


SourceThis report was generated using AI

Related Teradici PCoIP Graphics Agent vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2021-25694HIGH7.8
  • Teradici PCoIP Graphics Agent logoTeradici PCoIP Graphics Agent
  • cpe:2.3:a:teradici:pcoip_graphics_agent
NoYesMay 13, 2021
CVE-2020-13177HIGH7.8
  • Teradici PCoIP Graphics Agent logoTeradici PCoIP Graphics Agent
  • cpe:2.3:a:teradici:pcoip_standard_agent
NoYesAug 11, 2020
CVE-2020-13178MEDIUM6.7
  • Teradici PCoIP Graphics Agent logoTeradici PCoIP Graphics Agent
  • cpe:2.3:a:teradici:pcoip_standard_agent
NoYesAug 11, 2020
CVE-2021-25688MEDIUM5.5
  • Teradici PCoIP Graphics Agent logoTeradici PCoIP Graphics Agent
  • cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*
NoYesFeb 11, 2021
CVE-2020-13179MEDIUM5.5
  • Teradici PCoIP Graphics Agent logoTeradici PCoIP Graphics Agent
  • cpe:2.3:a:teradici:pcoip_standard_agent
NoYesAug 11, 2020

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management