Splunk Splunk Enterprise: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 7.5
  CVE-2024-23678

  Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

  In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition on the machine. This vulnerability only…

  Splunk Splunk Enterprise
  Jan 22, 2024
• Medium 6.5
  CVE-2024-23675

  Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

  In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.

  Splunk Splunk Enterprise Splunk Cloud
  Jan 22, 2024
• Medium 4.6
  CVE-2024-23676

  Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

  In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.

  Splunk Splunk Enterprise Splunk Cloud
  Jan 22, 2024
• Medium 4.3
  CVE-2024-23677

  Server Response Disclosure in RapidDiag Salesforce.com Log File

  In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.

  Splunk Splunk Enterprise Splunk Cloud
  Jan 22, 2024

Revision history

1. 2024-01-22 #1

   Initiale Fassung

References

• Splunk Security Advisory vom 2024-01-22
  https://advisory.splunk.com//advisories/SVD-2024-0105
• Splunk Security Advisory vom 2024-01-22
  https://advisory.splunk.com//advisories/SVD-2024-0106
• Splunk Security Advisory vom 2024-01-22
  https://advisory.splunk.com//advisories/SVD-2024-0107
• Splunk Security Advisory vom 2024-01-22
  https://advisory.splunk.com//advisories/SVD-2024-0108
• Splunk Security Advisory vom 2024-01-22
  https://advisory.splunk.com//advisories/SVD-2024-0109