CVE-2023-31293
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2023-31293 is a vulnerability affecting Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6. This issue enables remote attackers to bypass profile restrictions and access sensitive information, including the journal, despite it being disabled in the Reader system user's web browser. The vulnerability stems from improper access control within the Reader system. Attackers can exploit this flaw to obtain valuable data, potentially leading to significant security implications for affected organizations. It is recommended that users upgrade to the latest version of CPTO to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.