CVE-2024-53243
Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway
Severity
Medium 4.3
CVSS 3.1
Exploited
Not listed
EPSS
0.003
21.2th percentile
Discovered by
Not disclosed
Published
Dec 10, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see alert search query responses using Splunk Secure Gateway App Key Value Store (KVstore) collections endpoints due to improper access control.
Weakness: CWE-200
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Secure Gateway | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Secure Gateway
Credit
Anton (therceman)