Description (CNA)
The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SysJust / CTS Web | affected unspecified through released 2021.3.25 |
CWE
CWE-287
References
- https://www.twcert.org.tw/tw/cp-132-4759-92eab-1.html
- https://www.chtsecurity.com/news/40e165e2-e539-49bc-bcf1-e3b27c29e344
ADP enrichment
No English description supplied.