Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProLion CryptoSpike 安全漏洞
Vulnerability Description
ProLion CryptoSpike是ProLion公司的检测和打击可疑活动的解决方案。 ProLion CryptoSpike 3.0.15P2版本存在安全漏洞，该漏洞源于多个REST API端点中的用户角色检查不正确，允许低权限的远程攻击者执行特权功能并通过REST API端点调用实现权限升级。
CVSS Information
N/A
Vulnerability Type
N/A