CVE-2024-36989

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in Splunk Web Bulletin Messages that all users on the instance receive.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
SplunkCNA
6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
splunkcloud
9.1.2312 ≤
𝑥
< 9.1.2312.200
splunksplunk
9.0.0 ≤
𝑥
< 9.0.10
splunksplunk
9.1.0 ≤
𝑥
< 9.1.5
splunksplunk
9.2.0 ≤
𝑥
< 9.2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://advisory.splunk.com/advisories/SVD-2024-0709
https://research.splunk.com/application/4b7f368f-4322-47f8-8363-2c466f0b7030
https://advisory.splunk.com/advisories/SVD-2024-0709
https://research.splunk.com/application/4b7f368f-4322-47f8-8363-2c466f0b7030