CVE-2024-45735
Improper Access Control for low-privileged user in Splunk Secure Gateway App
Severity
Medium 4.3
CVSS 3.1
Exploited
Not listed
EPSS
0.003
27.3th percentile
Discovered by
Not disclosed
Published
Oct 14, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a low-privileged user that does not hold the "admin" or "power" Splunk roles can see App Key Value Store (KV Store) deployment configuration and public/private keys in the Splunk Secure Gateway App.
Weakness: CWE-284
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Secure Gateway | SIEM & Log Management | affected-vendor |
Vendor-reported products (4)
- Splunk · Splunk Enterprise
- Splunk · Splunk Secure Gateway
- splunk · splunk_enterprise
- splunk · splunk_secure_gateway
Credit
Gabriel Nitu, Splunk