CVE-2023-31292

2023-12-2900:00:00

mitre

www.cve.org

sesami cash point

transport optimizer

cpto

6.3.8.6

security issue

back button refresh attack

authentication bypass

AI Score

5.7

Confidence

High

EPSS

Percentile

5.1%

JSON

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via “Back Button Refresh” attack.

References

herolab.usd.de/en/security-advisories/usd-2022-0051/