Description
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mitake | Mitake Smart Stock Selection System | unspecified – ≤ 2020/06/23 | — |