Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36618 State: PUBLISHED Published: 2023-10-04T00:00:00 Last Updated: 2024-09-20T13:13:46.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-code-execution-missing-authentication-atos-unify-openscape/ - https://packetstormsecurity.com/files/174704/Atos-Unify-OpenScape-Code-Execution-Missing-Authentication.html - https://networks.unify.com/security/advisori
es/174704/Atos-Unify-OpenScape-Code-Execution-Missing-Authentication.html - https://networks.unify.com/security/advisories/OBSO-2307-01.pdf
CVE ID: CVE-2023-36619 State: PUBLISHED Published: 2023-10-04T00:00:00 Last Updated: 2024-09-19T19:26:50.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-code-execution-missing-authentication-atos-unify-openscape/ - https://packetstormsecurity.com/files/174704/Atos-Unify-OpenScape-Code-Execution-Missing-Authentication.html - https://networks.unify.com/security/advisories/OBSO-2307-01
Unify-OpenScape-Code-Execution-Missing-Authentication.html - https://networks.unify.com/security/advisories/OBSO-2307-01.pdf
CVE ID: CVE-2023-36620 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-09-05T15:03:54.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/blog/detail/the-hidden-costs-of-parental-control-apps/ - https://useboomerang.
nt: References: - https://sec-consult.com/blog/detail/the-hidden-costs-of-parental-control-apps/ - https://useboomerang.com/ - https://seclists.org/fulldisclosure/2023/Jul/12
CVE ID: CVE-2023-36621 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-09-05T14:59:31.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/blog/detail/the-hidden-costs-of-parental-control-apps/ - https://useboomerang.com/ - https://seclists.org/fulldisclosure/2023/Jul/12
CVE ID: CVE-2023-36622 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T15:00:56.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-012.txt - https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013
CVE ID: CVE-2023-36623 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T14:58:53.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-013.txt - https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013
CVE ID: CVE-2023-36624 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T14:42:49.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-004.txt - https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013
CVE ID: CVE-2023-36627 State: PUBLISHED Published: 2023-10-02T22:47:12.443Z Last Updated: 2024-09-23T13:44:34.694Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Pure Storage Products: FlashBlade Purity Description: A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin
: - https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Snapshot_Scheduler_CVE-2023-36627
CVE ID: CVE-2023-36628 State: PUBLISHED Published: 2023-10-02T23:15:28.716Z Last Updated: 2024-09-23T13:35:46.180Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Pure Storage Products: FlashArray Purity Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_Privilege_Escalation_in_VASA_CVE-2023-36628
CVE ID: CVE-2023-36629 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-20T15:20:49.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/STMicroelectronics/ST54-android-packages-apps-Nfc/releases/tag/130-20230215-23W07p0 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10s
lation-with-a-32-line-fuzzer/ - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10sNote-1.txt
CVE ID: CVE-2023-36630 State: PUBLISHED Published: 2023-06-25T00:00:00 Last Updated: 2024-11-27T19:47:23.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cloudpanel.io/docs/v2/changelog/ - https://github.com/yunaranyancat/poc-dump/blob/main/cloudpanel/README.md
CVE ID: CVE-2023-36631 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-08-02T16:52:54.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerone.com/reports/2000375 - https://www.bencteux.fr/posts/malwarebytes_wfc/
CVE ID: CVE-2023-36632 State: PUBLISHED Published: 2023-06-25T00:00:00 Last Updated: 2024-11-27T19:46:48.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser
tation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.python.org/3/library/email.utils.html - https://docs.python.org/3/library/email.html - https://github.com/Daybreak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py - https://github.com/python/cpython/issues/10
ak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py - https://github.com/python/cpython/issues/103800
CVE ID: CVE-2023-36633 State: PUBLISHED Published: 2023-11-14T18:07:46.082Z Last Updated: 2024-08-30T18:10:16.620Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiMail Problem Types: CWE-285 Description: An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-203
CVE ID: CVE-2023-36634 State: PUBLISHED Published: 2023-09-13T12:29:31.577Z Last Updated: 2024-09-24T19:59:21.111Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiAP-U Problem Types: CWE-73 Description: An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
ed command arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-123
CVE ID: CVE-2023-36635 State: PUBLISHED Published: 2023-09-07T12:41:13.903Z Last Updated: 2024-09-26T14:17:39.335Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiSwitchManager Problem Types: CWE-284 Description: An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-174
CVE ID: CVE-2023-36636 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:09.631Z Description: No description available.
CVE ID: CVE-2023-36637 State: PUBLISHED Published: 2023-10-10T16:50:16.269Z Last Updated: 2024-09-18T20:28:26.875Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiMail Problem Types: CWE-79 Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to inject HTML tags in FortiMail's calendar via input fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-194
CVE ID: CVE-2023-36638 State: PUBLISHED Published: 2023-09-13T12:29:36.809Z Last Updated: 2024-09-24T19:58:57.093Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-284 Description: An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may allow a remote and authenticated API admin user to access some system settings such as the mail server settin
ns API may allow a remote and authenticated API admin user to access some system settings such as the mail server settings through the API via a stolen GUI session ID. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-522
CVE ID: CVE-2023-36639 State: PUBLISHED Published: 2023-12-13T06:42:44.194Z Last Updated: 2024-08-02T16:52:54.282Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiOS, FortiPAM, FortiProxy Problem Types: CWE-134 Description: A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands via specially crafted API requests. Additional Analyst Notes
.3 allows attacker to execute unauthorized code or commands via specially crafted API requests. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-138
CVE ID: CVE-2023-36640 State: PUBLISHED Published: 2024-05-14T16:19:21.747Z Last Updated: 2024-08-02T16:52:54.010Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiProxy, FortiPAM, FortiOS Problem Types: CWE-134 Description: A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiPAM versions 1.0.0 through 1.0.3, FortiOS versions 7.2.0, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.16 allows attacker to execute unauthorized code or
.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.16 allows attacker to execute unauthorized code or commands via specially crafted commands Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-137
CVE ID: CVE-2023-36641 State: PUBLISHED Published: 2023-11-14T18:05:00.645Z Last Updated: 2024-08-30T18:21:45.483Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiProxy, FortiOS Problem Types: CWE-197 Description: A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions al
5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions allows attacker to denial of service via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-151
CVE ID: CVE-2023-36642 State: PUBLISHED Published: 2023-09-13T12:29:26.198Z Last Updated: 2024-09-25T17:33:50.277Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiTester Problem Types: CWE-77 Description: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 3.0.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-501
CVE ID: CVE-2023-36643 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-02T16:52:54.195Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/caffeinated-labs/CVE-2023-36643
CVE ID: CVE-2023-36644 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-27T17:52:31.408Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/caffeinated-labs/CVE-2023-36644
CVE ID: CVE-2023-36645 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-08-02T16:52:53.925Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/caffeinated-labs/CVE-2023-36645
CVE ID: CVE-2023-36646 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-08-02T16:52:54.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation. Additional Analyst Notes: - CVE Program Container: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36646
CVE ID: CVE-2023-36647 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-11-26T17:57:33.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via crafted JWT tokens. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36647
CVE ID: CVE-2023-36648 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T16:52:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer). Additional Analyst Notes: - CVE Program Container: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36648
CVE ID: CVE-2023-36649 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T16:52:53.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs (as a Granafa authenticated user) or from the Loki REST API without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36649
CVE ID: CVE-2023-36650 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T16:52:54.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux user on the host system via forged update packages. Additional Analyst Notes: - CVE Program Container: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36650
CVE ID: CVE-2023-36651 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-28T17:15:02.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36651
CVE ID: CVE-2023-36652 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-05-27T14:40:05.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL commands injected in the search parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36652
CVE ID: CVE-2023-36654 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T16:52:54.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH private keys (associated with a Linux root user) by injecting paths inside REST API endpoint parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36654
CVE ID: CVE-2023-36655 State: PUBLISHED Published: 2023-12-06T00:00:00 Last Updated: 2024-10-10T19:04:32.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://prolion.com/cryptospike/ - https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36655