In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.
References
| Link | Resource |
|---|---|
| https://advisory.splunk.com/advisories/SVD-2024-0105 | Vendor Advisory |
| https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ | Vendor Advisory |
| https://advisory.splunk.com/advisories/SVD-2024-0105 | Vendor Advisory |
| https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://advisory.splunk.com/advisories/SVD-2024-0105 - Vendor Advisory | |
| References | () https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ - Vendor Advisory |
29 Jan 2024, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | () https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/ - Vendor Advisory | |
| References | () https://advisory.splunk.com/advisories/SVD-2024-0105 - Vendor Advisory | |
| CWE | CWE-863 | |
| CPE | cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* cpe:2.3:a:splunk:cloud:*:*:*:*:*:*:*:* |
|
| First Time |
Splunk
Splunk cloud Splunk splunk |
24 Jan 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jan 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-22 21:15
Updated : 2024-11-21 08:58
NVD link : CVE-2024-23675
Mitre link : CVE-2024-23675
CVE.ORG link : CVE-2024-23675
JSON object : View
Products Affected
splunk
- splunk
- cloud