PT-2024-1642 · Splunk · Splunk Add-On Builder

Vikram Ashtaputre · Published 2024-01-30 · Updated 2024-04-10 · CVE-2023-46230

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Splunk Add-on Builder versions prior to 4.1.4

Description The issue is related to improper handling of log output, allowing a remote attacker to write arbitrary information to internal log files. This can lead to the exposure of sensitive information.

Recommendations For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to internal log files to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2024-01314

CVE-2023-46230

Affected Products

Splunk Add-On Builder

References · 9

• https://bdu.fstec.ru/vul/2024-01314 · Security Note
• https://advisory.splunk.com/advisories/SVD-2024-0111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46230 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46230 · Vendor Advisory
• https://t.me/true_secator/5358 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1752415294893466064 · Twitter Post
• https://twitter.com/CVEnew/status/1752379855407038931 · Twitter Post
• https://t.me/cvenotify/70104 · Telegram Post
• https://vuldb.com/ru/?id.252425 · Note