CVE-2024-45586 | BDVDB-2026-247306 Detail

Description#

This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized account take over belonging to other users.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-09-03Record published in the CVE List.
2. Version 22024-09-04Most recent update recorded in the CVE List.