Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Informationen offenzulegen oder um Sicherheitsmaßnahmen zu umgehen.
Product
Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.
Vulnerabilities 2
-
High 8.1
Risky command safeguards bypass in Dashboard Examples Hub
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phi…
-
High 7.2
Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the token validation process. This exposure happens when either Splunk Enterprise runs in debug mode or the JsonWebToken component has b…
Revision history
-
#2
Produktzuordnung überprüft
-
#1
Initiale Fassung
References
-
Splunk Security Advisory vom 2024-03-27
https://advisory.splunk.com//advisories/SVD-2024-0301
-
Splunk Security Advisory vom 2024-03-27
https://advisory.splunk.com//advisories/SVD-2024-0302