CVE-2021-28174CWE-287

Mitake Smart Stock Selection System - Broken Authentication

Medium · published April 8, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00953 · 61.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-04-08T03:50Z
EPSS history
Timeline
  • 08 APR 03:50Z
    Mitake Smart Stock Selection System - Broken Authentication
    cvelistv5