CVE Vulnerabilities

CVE-2023-31293

Published: Dec 29, 2023 | Modified: Jan 08, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system users web browser, allowing the journal to be displayed, despite the option being disabled.

Affected Software

Name Vendor Start Version End Version
Cash_point_&_transport_optimizer Sesami 6.3.8.6.718 (including) 6.3.8.6.718 (including)

References