CVE-2024-29946
Risky command safeguards bypass in Dashboard Examples Hub
Severity
High 8.1
CVSS 3.1
Exploited
Not listed
EPSS
0.008
52.9th percentile
Discovered by
Not disclosed
Published
Mar 27, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into initiating a request within their browser.
Weakness: CWE-20
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (4)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
- splunk · splunk
- splunk · cloud