CVE-2024-23675
Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
Severity
Medium 6.5
CVSS 3.1
Exploited
Not listed
EPSS
0.004
30.7th percentile
Discovered by
Not disclosed
Published
Jan 22, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.
Weakness: CWE-284
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud
Credit
Julian Kaufmann