CVE-2021-32543mediumCWE-287

CVE-2021-32543: medium-severity vulnerability in SysJust CTS Web

SysJust CTS Web - Broken Authentication

Published · Updated

Follow this CVE+ Monitor CTS Web

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.8%
The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
SysJust · CTS Web
Related CVEs — SysJust CTS Web

In the same product, most dangerous first.

CVE-2021-32541MEDIUMSysJust CTS Web - Broken Access ControlEPSS 1.5%CVE-2021-32542MEDIUMSysJust CTS Web - Reflected XSSEPSS 0.7%