CVE-2023-31292

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 29, 2023
Updated: Jan 4, 2024
CWE ID 287

Summary

CVE-2023-31292 is a vulnerability affecting Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6. This issue permits local attackers to gain unauthorized access to sensitive information and bypass authentication. The vulnerability is exploited through a "Back Button Refresh" attack method. Attackers can potentially manipulate the system's state, compromising the security of the cash point or transport optimization services. This vulnerability poses a significant risk and requires prompt remediation to prevent potential data breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share