CVEvulnerability
CVE-2023-36648
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- Weaknesses
- CWE-287
Description
Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer).
Affected configurations
• prolion cryptospike 3.0.15
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36648 Exploit, Third Party Advisory
- https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36648 Exploit, Third Party Advisory