CVE-2023-36649 | BDVDB-2026-219016 Detail

Description#

Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs (as a Granafa authenticated user) or from the Loki REST API without authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36649

Exploit#

No public exploit known

History#

Version 12023-12-12Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.