Skip to content
OpenAdvisories
High NCSC-2024-0408 3 CVEs

Kwetsbaarheden verholpen in Splunk Enterprise

Published Oct 15, 2024 · Updated Oct 15, 2024 · nl

Vendor: Splunk Product: splunk Product: Splunk Cloud Platform Product: Splunk Enterprise

Summary

Splunk heeft kwetsbaarheden verholpen in Splunk Enterprise.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om toegang te krijgen tot gevoelige gegevens, of willekeurige code uit te voeren in de context van de applicatie.

Voor succesvol misbruik moet de kwaadwillende voorafgaand geauthenticeerd zijn.

Oplossingen
Splunk heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 3

  • High 8.8
    CVE-2024-45733

    Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

    In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.

    Splunk Splunk Enterprise
  • High 8.0
    CVE-2024-45731

    Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

    In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root directory, which has a default location in the Windows System32…

    Splunk Splunk Enterprise
  • High 7.1
    CVE-2024-45732

    Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

    In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could r…

    Splunk Splunk Enterprise Splunk Cloud Platform

Revision history

  1. #0

    Initiele versie

References