CVE-2024-36995

Description

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could create experimental items.

Reserved 2024-05-30 | Published 2024-07-01 | Updated 2025-01-02 | Assigner Splunk

Problem types

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

Product status

9.2 before 9.2.2
affected

9.1 before 9.1.5
affected

9.0 before 9.0.10
affected

9.1.2312 before 9.1.2312.200
affected

9.1.2308 before 9.1.2308.207
affected

Credits

MrHack

References

advisory.splunk.com/advisories/SVD-2024-0715

research.splunk.com/.../84afda04-0cd6-466b-869e-70d6407d0a34

cve.org (CVE-2024-36995)

nvd.nist.gov (CVE-2024-36995)

Download JSON