Skip to content
OpenAdvisories
Unscored CVE-2023-36651 EUVD-2023-40595GHSA-f455-qfmp-xgc2

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and cons…

Published Dec 12, 2023 · Updated Aug 28, 2024 · Assigned by mitre

Description

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.

References