Improper Access Control in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718) Allows Information Disclosure and Profile Restriction Bypass

Improper Access Control in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718) Allows Information Disclosure and Profile Restriction Bypass

CVE-2023-31293 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.

Learn more about our Web App Pen Testing.