CVE-2002-0674
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.
- Score
- CVSS 2.0 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2002-07-23
- Last modified
- 2024-08-08
Affected products
References
- http://www.atstake.com/research/advisories/2002/a071202-1.txt
- http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp
- http://www.securityfocus.com/bid/5221
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9569
