CVE-2023-36648

Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive…

published December 12, 2023

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00980 · 61.9th percentile
Published
2023-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive…
    cvelistv5