CVE-2022-50692

Description

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

Weakness classification

• disclosure@vulncheck.com: CWE-613

Primary references

• disclosure@vulncheck.com — Exploit, Third Party Advisory
• disclosure@vulncheck.com — Third Party Advisory
• disclosure@vulncheck.com — Exploit, Third Party Advisory
• disclosure@vulncheck.com — Product
• disclosure@vulncheck.com — Third Party Advisory
• disclosure@vulncheck.com — Exploit, Third Party Advisory