Lucene search

PRIOn knowledge basePRION:CVE-2024-23676

HistoryJan 22, 2024 - 9:15 p.m.

Code injection

2024-01-2221:15:00

PRIOn knowledge base

www.prio-n.com

splunk

code injection

vulnerability

version 9.0.8

version 9.1.3

low-privileged user

unauthorized index

metrics

high-privileged user

exploitation

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

JSON

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.

CPENameOperatorVersion
cloudlt9.1.2308.200
splunkge9.0.0
splunklt9.0.8
splunkge9.1.0
splunklt9.1.3

Name	Operator	Version
cloud	lt	9.1.2308.200
splunk	ge	9.0.0
splunk	lt	9.0.8
splunk	ge	9.1.0
splunk	lt	9.1.3

References

advisory.splunk.com/advisories/SVD-2024-0106

research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/