Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Informationen offenzulegen.
Product
Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.
Vulnerabilities 2
-
High 8.8
Session Token Disclosure to Internal Log Files in Splunk Add-on Builder
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
-
High 8.2
Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
Revision history
-
#1
Initiale Fassung
References
-
Splunk Security Advisory vom 2024-01-30
https://advisory.splunk.com//advisories/SVD-2024-0110
-
Splunk Security Advisory vom 2024-01-30
https://advisory.splunk.com//advisories/SVD-2024-0111