Lucene search
HistoryDec 29, 2023 - 2:15 a.m.
CVE-2023-31292
sesami cash point & transport optimizer
cpto 6.3.8.6
vulnerability
sensitive information disclosure
authentication bypass
back button refresh
attack
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via “Back Button Refresh” attack.
Affected configurations
Node
sesamicash_point_\&_transport_optimizerMatch6.3.8.6.718
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sesami | cash_point_\&_transport_optimizer | 6.3.8.6.718 | cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-31292
2023-12-29 02:15:44
cvelist
cvelist
CVE-2023-31292
2023-12-29 00:00:00
prion
prion
Authentication flaw
2023-12-29 02:15:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-31292