medium6.5
CVE-2021-28174
Mitake smart stock selection system contains a broken authentication vulnerability.
Impact
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitake | Smart Stock Selection | through 2020-06-23 |