CVE-2023-36646

Summary

CVE-2023-36646 is a vulnerability affecting ProLion CryptoSpike 3.0.15P2. The issue lies in the inadequate role checking mechanism in several REST API endpoints. An attacker with minimal privileges can exploit this flaw, leading to the execution of privileged functions. As a result, the vulnerability enables privilege escalation, allowing unauthorized access and potential data compromise through REST API endpoint invocations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.