CVE-2024-36995 | THREATINT

Assigner	Splunk
Reserved	2024-05-30
Published	2024-07-01
Updated	2024-07-03

Description

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could create experimental items.

MEDIUM: 4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Problem types

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

Product status

9.2 before 9.2.2

affected

9.1 before 9.1.5

affected

9.0 before 9.0.10

affected

9.1.2312 before 9.1.2312.200

affected

9.1.2308 before 9.1.2308.207

affected

Credits

MrHack

References

https://advisory.splunk.com/advisories/SVD-2024-0715

https://research.splunk.com/application/84afda04-0cd6-466b-869e-70d6407d0a34

cve.org CVE-2024-36995

nvd.nist.gov CVE-2024-36995

Download JSON