CVE-2023-24477

5.4 mediumEPSS 0.1%

Medium (5.4) in nozominetworks. EPSS 0.1% chance of exploitation in the next 30 days.

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session.

Severity

CVSS 4.0

5.4 medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.0 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2023-08-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nozominetworks:cmc
nozominetworks:guardian

References

https://security.nozominetworks.com/NN-2023:8-01
https://security.nozominetworks.com/NN-2023:8-01

Check your stack JSON