CVE-2024-36990

Description

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that does not hold the admin or power Splunk roles could send a specially crafted HTTP POST request to the datamodel/web REST endpoint in Splunk Enterprise, potentially causing a denial of service.

Reserved 2024-05-30 | Published 2024-07-01 | Updated 2024-12-10 | Assigner Splunk

Problem types

The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Product status

9.2 before 9.2.2
affected

9.1 before 9.1.5
affected

9.0 before 9.0.10
affected

9.1.2312 before 9.1.2312.202
affected

9.1.2312 before 9.1.2312.109
affected

9.1.2308 before 9.1.2308.209
affected

Credits

Anton (therceman)

References

advisory.splunk.com/advisories/SVD-2024-0710

research.splunk.com/.../45766810-dbb2-44d4-b889-b4ba3ee0d1f5

cve.org (CVE-2024-36990)

nvd.nist.gov (CVE-2024-36990)

Download JSON