Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH private keys (associated with a Linux root user) by injecting paths inside REST API endpoint parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProLion CryptoSpike 安全漏洞
Vulnerability Description
ProLion CryptoSpike是ProLion公司的检测和打击可疑活动的解决方案。 ProLion CryptoSpike 3.0.15P2 版本存在安全漏洞，该漏洞源于日志下载 REST API 端点中的目录遍历。
CVSS Information
N/A
Vulnerability Type
N/A