Back to search
CVE-2024-45588
Published: Sep 3, 2024
Modified: Sep 4, 2024
PUBLISHED
Description
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized access and modification of sensitive information belonging to other users.
| Vendor | Product | Versions |
|---|---|---|
Symphony Fintech | XTS Web Trader | affected 2.0.0.1_P160 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now