Vulnerabilities

TI-2024-15696 CVE-2024-23678 · GHSA-7fqg-p5hm-92r9

Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

LOW 37

In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0022 Published 2024-01-22 Fixed in 9.0.8, 9.1.3 CWE-20

TI-2024-15694 CVE-2024-23676 · GHSA-6g54-284w-pj4p

Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

LOW 21

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00324 Published 2024-01-22 Fixed in 9.0.8, 9.1.3 +1 CWE-20

TI-2024-15693 CVE-2024-23675 · GHSA-h7m5-mp8f-v424

Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

LOW 29

In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00376 Published 2024-01-22 Fixed in 9.0.8, 9.1.3 +1 CWE-284

Vulnerabilities

Filters

Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion