CVE-2023-4910
published 2023-11-06CVE-2023-4910: A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.21%
11.5th percentile
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | 3scale_api_management | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g849-x577-8j36: A flaw was found In 3Scale Admin Portal
ghsa_unreviewed·2023-11-06
CVE-2023-4910 [MEDIUM] CWE-525 GHSA-g849-x577-8j36: A flaw was found In 3Scale Admin Portal
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
Red Hat
3scale-admin-portal: logged out users tokens can be accessed
vendor_redhat·2023-09-12·CVSS 5.5
CVE-2023-4910 [MEDIUM] CWE-668 3scale-admin-portal: logged out users tokens can be accessed
3scale-admin-portal: logged out users tokens can be accessed
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.
Statement: This vulnerability requires direct access to the user browser in order to read the tokens page, hence the moderate impact.
Mitigation: No mitigation is yet available for this flaw.
Package: 3scale-admin-portal (Red Hat 3scale API Management Platform 2) - Affected
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-06
Published