Lucene search

MitreCVE-2023-31292

HistoryDec 29, 2023 - 2:15 a.m.

CVE-2023-31292

2023-12-2902:15:44

CWE-287

mitre

web.nvd.nist.gov

cve-2023-31292

sesami

cash point

transport optimizer

cpto 6.3.8.6

vulnerability

information disclosure

authentication bypass

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via “Back Button Refresh” attack.

Affected configurations

Nvd

Node

sesamicash_point_\&_transport_optimizerMatch6.3.8.6.718

VendorProductVersionCPE
sesamicash_point_\&_transport_optimizer6.3.8.6.718cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sesami	cash_point_\&_transport_optimizer	6.3.8.6.718	cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:::::::*

References

herolab.usd.de/en/security-advisories/usd-2022-0051/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-31292