CVE-2023-4910CWE-668

3scale-admin-portal: logged out users tokens can be accessed

Medium · published November 6, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2023-11-06T12:49Z
EPSS history
Timeline
  • 06 NOV 12:49Z
    3scale-admin-portal: logged out users tokens can be accessed
    cvelistv5