CVE Vulnerabilities

CVE-2023-31293

Published: Dec 29, 2023 | Modified: Nov 21, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system users web browser, allowing the journal to be displayed, despite the option being disabled.

Affected Software

NameVendorStart VersionEnd Version
Cash_point_&_transport_optimizerSesami6.3.8.6.718 (including)6.3.8.6.718 (including)

References