Security Advisory

CVE-2023-36655

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-12-06 00:00:00

Last updated 2024-10-10 19:04:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination.

← Browse all CVEs View on cve.org ↗