PT-2024-35690 · Splunk · Splunk Cloud Platform+1

Published 2024-12-10 · Updated 2024-12-10 · CVE-2024-53245

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.3.0 Splunk Enterprise versions prior to 9.2.4 Splunk Enterprise versions prior to 9.1.7 Splunk Cloud Platform versions prior to 9.1.2312.206

Description A low-privileged user without the "admin" or "power" Splunk roles, but with a username matching a role that has read access to dashboards, could potentially see the dashboard name and the dashboard XML by cloning the dashboard.

Recommendations For Splunk Enterprise versions prior to 9.3.0, update to version 9.3.0 or later. For Splunk Enterprise versions prior to 9.2.4, update to version 9.2.4 or later. For Splunk Enterprise versions prior to 9.1.7, update to version 9.1.7 or later. For Splunk Cloud Platform versions prior to 9.1.2312.206, update to version 9.1.2312.206 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-53245

Affected Products

Splunk Cloud Platform

Splunk Enterprise

References · 6

• https://advisory.splunk.com/advisories/SVD-2024-1203 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53245 · Security Note
• https://osv.dev/vulnerability/CVE-2024-53245 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1866568926559170658 · Twitter Post
• https://t.me/cvedetector/12533 · Telegram Post
• https://twitter.com/CVEnew/status/1866571220197720285 · Twitter Post