In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.
References
| Link | Resource |
|---|---|
| https://advisory.splunk.com/advisories/SVD-2024-0105 | Vendor Advisory |
| https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Jan 2024, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://advisory.splunk.com/advisories/SVD-2024-0105 - Vendor Advisory | |
| References | () https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Splunk
Splunk splunk Splunk cloud |
|
| CPE | cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* cpe:2.3:a:splunk:cloud:*:*:*:*:*:*:*:* |
|
| CWE | CWE-863 |
24 Jan 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jan 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-22 21:15
Updated : 2024-04-10 01:15
NVD link : CVE-2024-23675
Mitre link : CVE-2024-23675
JSON object : View
Products Affected
splunk
- cloud
- splunk
CWE
CWE-863
Incorrect Authorization