CVE-2024-45732
Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app
Severity
High 7.1
CVSS 3.1
Exploited
Not listed
EPSS
0.004
32.3th percentile
Discovered by
Not disclosed
Published
Oct 14, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a search as the "nobody" Splunk user in the SplunkDeploymentServerConfig app. This could let the low-privileged user access potentially restricted data.
Weakness: CWE-862
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (4)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
- splunk · splunk_enterprise
- splunk · splunk_cloud_platform
Credit
Anton (therceman)