CVE-2023-36655
Assigner: mitre
Published: 2023-12-06T00:00:00
State: PUBLISHED
descriptions: value: The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination.
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
problemTypes: descriptions: type: text
description: n/a