1. Home
  2. CVE Database
  3. CVE-2021-28174
MEDIUM · 6.5

CVE-2021-28174

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transactio...

Vulnerability Description

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
MitakeSmart Stock Selection<= 2020-06-23

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2021-28174?

CVE-2021-28174 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transactio...

How severe is CVE-2021-28174?

CVE-2021-28174 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-28174?

Check the references section above for vendor advisories and patch information. Affected products include: Mitake Smart Stock Selection.