CVE-2023-22938
14.02.2023, 18:15
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the sendemail REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the splunk-system-user account on the local instance.Enginsight
| Vendor | Product | Version |
|---|---|---|
| splunk | splunk | 8.1.0 ≤ 𝑥 < 8.1.13 |
| splunk | splunk | 8.2.0 ≤ 𝑥 < 8.2.10 |
| splunk | splunk | 9.0.0 ≤ 𝑥 < 9.0.4 |
| splunk | splunk_cloud_platform | 𝑥 < 9.0.2209.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration