CVE-2023-36647

n/a / n/a PUBLISHED

Description (CNA)

A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via crafted JWT tokens.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36647

ADP enrichment

CVE

No English description supplied.

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36647

CISA-ADP

No English description supplied.

No references supplied.