Description (CNA)
The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SysJust / CTS Web | affected unspecified through released 2021.3.25 |
CWE
No CWE identifiers supplied.
References
- https://www.twcert.org.tw/tw/cp-132-4757-893eb-1.html
- https://www.chtsecurity.com/news/40e165e2-e539-49bc-bcf1-e3b27c29e344
ADP enrichment
No English description supplied.