CVE-2022-50692 | BDVDB-2026-308236 Detail
SOUND4Impact/Pulse/First
Description#
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-613 Insufficient Session Expiration
References#
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5724.php
- https://packetstormsecurity.com/files/170251/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Insufficient-Session-Expiration.html
- https://cxsecurity.com/issue/WLB-2022120030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/247956
- https://www.sound4.com/
- https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-insufficient-session-expiration-vulnerability
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.