Lucene search

SplunkCVE-2024-36989

HistoryJul 01, 2024 - 5:15 p.m.

CVE-2024-36989

2024-07-0117:15:07

CWE-284

Splunk

web.nvd.nist.gov

splunk

notifications

low-privileged user

security vulnerability

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS

0.001

Percentile

16.0%

JSON

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in Splunk Web Bulletin Messages that all users on the instance receive.

Affected configurations

Nvd

Node

splunkcloudRange<9.1.2312.200

splunksplunkRange9.0.0–9.0.10enterprise

splunksplunkRange9.1.0–9.1.5enterprise

splunksplunkRange9.2.0–9.2.2enterprise

VendorProductVersionCPE
splunkcloud*cpe:2.3:a:splunk:cloud:*:*:*:*:*:*:*:*
splunksplunk*cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*

Vendor	Product	Version	CPE
splunk	cloud	*	cpe:2.3:a:splunk:cloud::::::::
splunk	splunk	*	cpe:2.3:a:splunk:splunk:::::enterprise:::*

CNA Affected

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.2"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.5"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.10"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.1.2312",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.2312.200"
      }
    ]
  }
]

References

advisory.splunk.com/advisories/SVD-2024-0709

research.splunk.com/application/4b7f368f-4322-47f8-8363-2c466f0b7030

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS

0.001

Percentile

16.0%

JSON

Related for CVE-2024-36989