CVE-2024-45733
Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows
Severity
High 8.8
CVSS 3.1
Exploited
Not listed
EPSS
0.011
62.6th percentile
Discovered by
Not disclosed
Published
Oct 14, 2024
Assigned by splunk
Description
In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.
Weakness: CWE-502
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- splunk · splunk_enterprise
Credit
Alex Hordijk