cveboard RSS feed

CVE-2024-45586

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Account Take Over Vulnerability

This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to unauthorized account take over belonging to other users.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

XTS Web Trader

Vendor
Symphony Fintech
Product
XTS Web Trader
Platforms
Unknown
Default status
unaffected
XTS Web Trader · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.0.0.1_P160affectedUnavailableUnavailableUnavailableNone listed

XTS Mobile Trader

Vendor
Symphony Fintech
Product
XTS Mobile Trader
Platforms
Unknown
Default status
unaffected
XTS Mobile Trader · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.0.0.1_P160affectedUnavailableUnavailableUnavailableNone listed