CVE-2021-32541

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services...

PT-2021-19766

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication and session management in the CTS Web transaction system. This allows remote unauthenticated attackers ...

CVE-2021-32543: Improper Authentication

The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity...

PT-2021-19768

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication management in the CTS Web transaction system. After a user logs in, remote attackers can manipulate...