CVE-2022-24950 Race condition in Eternal Terminal
An authenticated attacker can exploit a race condition to hijack SSH authorization sockets and log in as other users.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-24950?
CVE-2022-24950 is a high-severity vulnerability in Jason Gauci Eternal Terminal, published on 16 Aug 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().
Weakness: CWE-362
Which versions are affected by CVE-2022-24950?
It affects 1 product.
Products include Eternal Terminal Project Eternal Terminal.
How do I fix CVE-2022-24950?
Upgrade to a fixed version.
Is CVE-2022-24950 being exploited?
There is no known exploitation of CVE-2022-24950 in the wild and no public exploit code.
Other vulnerabilities in Jason Gauci Eternal Terminal
- CVE-2022-24949 Privilege escalation in Eternal Terminal
- CVE-2022-24951 Race condition in Eternal Terminal
- CVE-2022-24952 Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid
- CVE-2023-23558 Path traversal in n/a
- CVE-2022-48257 Information disclosure in n/a
Sources
Also known as GHSA-85gw-pchc-4rf3.