CVE-2023-36648 | BDVDB-2026-219015 Detail

Description#

Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36648

Exploit#

No public exploit known

History#

Version 12023-12-12Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.