CVE-2023-31300

2023-12-2900:00:00

mitre

www.cve.org

sesami

cpto

vulnerability

unencrypted transmission

password reset

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.3%

JSON

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.

References

herolab.usd.de/en/security-advisories/usd-2022-0057/