| |
Vulnerability CVE-2023-36654
Published: 2023-12-12 Modified: 2023-12-14
| Description: |
Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH private keys (associated with a Linux root user) by injecting paths inside REST API endpoint parameters. |
Type:
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
References: |
https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36654
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
