Security Advisory

CVE-2021-28174

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-08 03:50:39
Last updated 2024-09-16 16:53:43
Assigner twcert
CVSS score 6.5
State PUBLISHED

Description

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.