CVE-2002-0674 | BDVDB-2026-6814 Detail

Description#

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp
http://www.atstake.com/research/advisories/2002/a071202-1.txt
http://www.securityfocus.com/bid/5221
https://exchange.xforce.ibmcloud.com/vulnerabilities/9569

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.