CVE-2024-36982
Denial of Service through null pointer reference in “cluster/config” REST endpoint
Severity
High 7.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
40.3th percentile
Discovered by
Not disclosed
Published
Jul 1, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer reference on the cluster/config REST endpoint, which could result in a crash of the Splunk daemon.
Weakness: CWE-476
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (4)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
- splunk · splunk_enterprise
- splunk · splunk_cloud_platform
Credit
d0nahu3