CVE-2022-24950 in Eternal Terminal
Summary
by MITRE • 08/16/2022
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 05/05/2026
The vulnerability CVE-2022-24950 represents a critical race condition flaw in Eternal Terminal version 6.1.0 and earlier, which enables authenticated attackers to hijack SSH authorization sockets belonging to other users. This vulnerability resides within the UserTerminalRouter::getInfoForId() function, creating a security weakness that directly impacts the authentication and authorization mechanisms of the system. The race condition occurs during the processing of terminal information requests, where concurrent access to shared resources is not properly synchronized, allowing malicious actors to exploit temporal gaps in the system's operation.
The technical exploitation of this vulnerability stems from improper thread synchronization and resource management within the Eternal Terminal application. When multiple users attempt to access terminal information simultaneously, the lack of proper locking mechanisms in the UserTerminalRouter::getInfoForId() function creates opportunities for attackers to intercept and manipulate authorization socket references. This race condition allows an authenticated attacker to predict and potentially access another user's session data, effectively enabling privilege escalation and unauthorized system access. The flaw operates at the application layer and specifically targets the socket management functionality that handles SSH authentication contexts.
The operational impact of CVE-2022-24950 extends beyond simple unauthorized access, as it fundamentally compromises the integrity of user sessions and authentication processes. Attackers can leverage this vulnerability to impersonate legitimate users and gain access to systems that would otherwise require proper authentication credentials. This type of vulnerability directly affects the principle of least privilege and can lead to widespread compromise within environments where Eternal Terminal is deployed. The vulnerability affects organizations using older versions of Eternal Terminal, potentially exposing sensitive data and system resources to unauthorized access, particularly in multi-user environments where terminal sessions are frequently shared or managed concurrently.
Mitigation strategies for CVE-2022-24950 primarily involve upgrading to Eternal Terminal version 6.2.0 or later, where the race condition has been addressed through proper synchronization mechanisms and resource management. Organizations should implement immediate patch management procedures to ensure all instances of Eternal Terminal are updated to the secure version. Additionally, network segmentation and access controls should be reinforced to limit the potential impact of any exploitation attempts. The vulnerability aligns with CWE-362, which identifies race conditions as a critical weakness in concurrent programming, and may map to ATT&CK technique T1078 for valid accounts and privilege escalation through authentication manipulation. Security monitoring should be enhanced to detect unusual patterns in terminal session access and socket utilization that could indicate exploitation attempts.