PT-2024-27232 · Splunk · Splunk Enterprise
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Splunk Enterprise versions prior to 9.2.2
Splunk Enterprise versions prior to 9.1.5
Splunk Enterprise versions prior to 9.0.10
Description
The issue allows an authenticated user to execute a specially crafted query, which can then be used to serialize untrusted data, potentially leading to the execution of arbitrary code. This can be exploited by an attacker to gain unauthorized access and control.
Recommendations
For versions prior to 9.2.2, update to version 9.2.2 or later.
For versions prior to 9.1.5, update to version 9.1.5 or later.
For versions prior to 9.0.10, update to version 9.0.10 or later.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Splunk Enterprise