Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-32541

SysJust CTS Web - Broken Access Control

Description

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SysJust CTS Web

  • unspecified to ≤ released 2021.3.25affected

References