PT-2024-27232 · Splunk · Splunk Enterprise

Danylo Dmytriiev

+1

·

Published

2024-07-01

·

Updated

2024-10-15

·

CVE-2024-36984

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.2.2 Splunk Enterprise versions prior to 9.1.5 Splunk Enterprise versions prior to 9.0.10
Description The issue allows an authenticated user to execute a specially crafted query, which can then be used to serialize untrusted data, potentially leading to the execution of arbitrary code. This can be exploited by an attacker to gain unauthorized access and control.
Recommendations For versions prior to 9.2.2, update to version 9.2.2 or later. For versions prior to 9.1.5, update to version 9.1.5 or later. For versions prior to 9.0.10, update to version 9.0.10 or later.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-36984

Affected Products

Splunk Enterprise