CVE-2023-36655
The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication …
Published: 2023-12-06 · CVSS: 9.8 · CVSS 3.1
The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7