CyberRota Analysis
AI-GeneratedEleveo Call Recording Software versions up to 10.3.0 are vulnerable due to improper handling of logout requests, which can lead to session expiration. Although the severity is classified as low, the availability of a public exploit means that organizations using this software should prioritize patching to mitigate potential remote exploitation risks. Users of the affected software should assess their exposure and implement necessary security measures promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.