PT-2023-23979 · Splunk · Splunk Enterprise+1

Anton + 1 · Published 2023-06-01 · Updated 2024-04-10 · CVE-2023-32710

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.0.5 Splunk Enterprise versions prior to 8.2.11 Splunk Enterprise versions prior to 8.1.14 Splunk Cloud Platform versions prior to 9.0.2303.100

Description A low-privileged user can perform an unauthorized transfer of data from a search using the copyresults command if they know the search ID (SID) of a search job that has recently run.

Recommendations For Splunk Enterprise versions prior to 9.0.5, update to version 9.0.5 or later. For Splunk Enterprise versions prior to 8.2.11, update to version 8.2.11 or later. For Splunk Enterprise versions prior to 8.1.14, update to version 8.1.14 or later. For Splunk Cloud Platform versions prior to 9.0.2303.100, update to version 9.0.2303.100 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-32710

Affected Products

Splunk Cloud Platform

Splunk Enterprise

References · 4

• https://advisory.splunk.com/advisories/SVD-2023-0609 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32710 · Security Note
• https://t.me/cvenotify/51568 · Telegram Post