CVE-2023-36648

Summary

CVE-2023-36648 is a vulnerability affecting ProLion CryptoSpike 3.0.15P2's internal data streaming system. This issue results in missing authentication, enabling unauthenticated remote users to read potentially sensitive information and cause denial-of-service (DoS) attacks. These attacks can be carried out by directly manipulating data in Apache Kafka as both consumers and producers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.