CVE-2023-36654

Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH…

published December 12, 2023

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH private keys (associated with a Linux root user) by injecting paths inside REST API endpoint parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01241 · 68.9th percentile
Published
2023-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH…
    cvelistv5