CVE-2024-23676

In Splunk versions below 9.0.8 and 9.1.3, the mrollup SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
SplunkCNA
4.6 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
splunkcloud
𝑥
< 9.1.2308.200
splunksplunk
9.0.0 ≤
𝑥
< 9.0.8
splunksplunk
9.1.0 ≤
𝑥
< 9.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://advisory.splunk.com/advisories/SVD-2024-0106
https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/
https://advisory.splunk.com/advisories/SVD-2024-0106
https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/