CVE-2023-36655

概要

参考情報

• prolion.com/cryptospike · Product
• cvcn.gov.it/cvcn/cve/CVE-2023-36655 · Exploit

cryptospike のその他の脆弱性

• CVE-2023-36654中 6.5Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download …
• CVE-2023-36652中 4.3A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read datab…
• CVE-2023-36651高 7.2Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consu…
• CVE-2023-36650高 7.2A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux use…
• CVE-2023-36649緊急 9.1Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to im…