Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pingtel Expressa管理员帐户登录会话超时漏洞
Vulnerability Description
Expressa是一款由pingTel开发和维护的基于JAVA的VOIP电话系统。 Expressa在处理管理员登录会话超时处理中存在漏洞，本地攻击者可以利用这个漏洞以管理员帐户登录访问系统。 Expressa电话系统中的管理员登录没有设置会话超时限制，如果管理员通过按键面板登陆电话系统，登录会话只有在管理员选择"ok"或者"cancel"的情况下才会结束，如果管理员登录系统后，忘记选择"ok"或者"cancel"就离开电话，任意能物理访问电话系统的用户就可以以登录管理员帐户继续访问系统。 <*链接：ht
CVSS Information
N/A
Vulnerability Type
N/A