Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-4910 EUVD-2023-54749GHSA-g849-x577-8j36

3scale-admin-portal: logged out users tokens can be accessed

Published Nov 6, 2023 · Updated Nov 7, 2026 · Assigned by redhat

Description

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat 3scale API Management Platform 2 — —

References