Prolion Cryptospike vulnerabilities
- prolion cryptospike Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows... 6.5 Medium
- prolion cryptospike A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows... 4.3 Medium
- prolion cryptospike Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login... 7.2 High
- prolion cryptospike A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers... 7.2 High
- prolion cryptospike Insertion of sensitive information in the centralized (Grafana) logging system in ProLion... 9.1 Critical
- prolion cryptospike Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2... 8.2 High
- prolion cryptospike A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion... 7.5 High
- prolion cryptospike Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2... 8.8 High
- prolion cryptospike The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the... 9.8 Critical