PT-2024-5284 · Splunk · Splunk Config Explorer

Taihei Shimamine · Published 2024-05-24 · Updated 2024-10-28 · CVE-2024-35291

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Splunk Config Explorer versions prior to 1.7.16

Description The issue exists due to inadequate protection of the web page structure in Splunk Config Explorer, allowing for a cross-site scripting (XSS) attack. If exploited, this could lead to the execution of an arbitrary script on the user's web browser.

Recommendations For versions prior to 1.7.16, update to version 1.7.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the Splunk Config Explorer web interface until the update is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-05904

CVE-2024-35291

Affected Products

Splunk Config Explorer

References · 5

• https://bdu.fstec.ru/vul/2024-05904 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35291 · Security Note
• https://jvn.jp/en/jp/JVN56781258 · Note
• https://t.me/cvenotify/81064 · Telegram Post
• https://splunkbase.splunk.com/app/4353 · Note