CVE-2023-36647 | BDVDB-2026-219014 Detail

Description#

A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via crafted JWT tokens.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36647

Exploit#

No public exploit known

History#

Version 12023-12-12Record published in the CVE List.
Version 22024-11-26Most recent update recorded in the CVE List.