CVE-2024-23676
Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
Severity
Medium 4.6
CVSS 3.1
Exploited
Not listed
EPSS
0.003
25.4th percentile
Discovered by
Not disclosed
Published
Jan 22, 2024
Assigned by splunk
Description
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.
Weakness: CWE-20
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud
Credit
Anton (therceman)