Authentication flaw

2021-04-0804:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.

CPENameOperatorVersion
smart_stock_selectioneq<= 2020623

CPE	Name	Operator	Version
	smart_stock_selection	eq	<= 2020623

References

www.twcert.org.tw/tw/cp-132-4625-4ccc6-1.html