CVE-2023-31293:

0.0 CVSS

Description

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.

Classification

CVE ID: CVE-2023-31293

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.07% (probability of being exploited)

EPSS Percentile: 34.08% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://herolab.usd.de/en/security-advisories/usd-2022-0061/

Timeline