Lucene search
HistoryNov 06, 2023 - 1:15 p.m.
CVE-2023-4910
3scale
admin portal
browser caching
user logout
personal tokens
cve-2023-4910
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.2%
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
Affected configurations
Node
redhat3scale_api_managementMatch2.0
Related
cve
cve
CVE-2023-4910
2023-11-06 13:15:10
cvelist
cvelist
CVE-2023-4910 3scale-admin-portal: logged out users tokens can be accessed
2023-11-06 12:49:37
prion
prion
Input validation
2023-11-06 13:15:00
redhatcve
redhatcve
CVE-2023-4910
2023-09-12 09:05:48
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2023-4910