Threats tagged 'ghsa-qprx-3355-vjrx'

Nexterm versions up to 1.2.2-BETA have a missing authorization vulnerability that allows authenticated users to control other users' remote sessions. Specifically, attackers with a session ID can hibernate, resume, or terminate SSH, RDP, VNC, or SFTP sessions belonging to others. This vulnerability affects the session lifecycle management endpoints and can disrupt active remote connections.