CVE-2022-24950

2022-08-1600:00:00

CWE-362

facebook

www.cve.org

0.003 Low

EPSS

Percentile

68.4%

JSON

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users’ SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().

CNA Affected

[
  {
    "vendor": "Jason Gauci",
    "product": "Eternal Terminal",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "6.2.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]