What is CVE-2023-36648?

CVE-2023-36648 is a high-severity vulnerability in Prolion Cryptospike, classified under Improper Authentication. CVSS score: 8.2/10. Published 2023-12-12.

How severe is CVE-2023-36648?

High severity. CVSS v3 base score is 8.2 out of 10.

Auth bypass in Prolion Cryptospike

CVE-2023-36648

Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer).

Vulnerability class: Broken Authentication

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.

Affected products

Prolion Cryptospike — versions 3.0.15
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-36648?: CVE-2023-36648 is a high-severity vulnerability in Prolion Cryptospike, classified under Improper Authentication. CVSS score: 8.2/10. Published 2023-12-12.
How severe is CVE-2023-36648?: High severity. CVSS v3 base score is 8.2 out of 10.