CVE-2024-53245

Summary

In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read access to dashboards, could see the dashboard name and the dashboard XML by cloning the dashboard.

Affected Software

VendorProductVersion RangeStatus
SplunkSplunk Enterprise9.2 < 9.2.4affected
SplunkSplunk Enterprise9.1 < 9.1.7affected
SplunkSplunk Cloud Platform9.1.2312 < 9.1.2312.206affected

Weaknesses

  • CWE-200: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References