VDB
CVE-2022-24950
CVE-2022-24950
PUBLISHED
CVSS 7.5 HIGH
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().
EPSS 1.34% · 71.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.34%
71.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| eternal_terminal_project | eternal_terminal | 0 |
| Jason Gauci | Eternal Terminal | unspecified |
Timeline
- Aug 16, 2022 CVE Published
- Aug 16, 2022 EPSS Score
- Oct 2, 2022 EPSS Score
- Nov 18, 2022 EPSS Score
- Jan 3, 2023 EPSS Score
- Feb 19, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 24, 2023 EPSS Score
- Jul 10, 2023 EPSS Score
- Aug 26, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
References
- https://github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3 fix
- https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3 url
- [oss-security] 20230216 EternalTerminal: Review report and findings (predictable /tmp file paths and file permission issues, 3 CVEs) mailing-list