Lucene search

PRIOn knowledge basePRION:CVE-2024-23678

HistoryJan 22, 2024 - 9:15 p.m.

Deserialization of untrusted data

2024-01-2221:15:00

PRIOn knowledge base

www.prio-n.com

splunk

enterprise

windows

deserialization

vulnerability

untrusted data

disk partition

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition on the machine. This vulnerability only affects Splunk Enterprise for Windows.

CPENameOperatorVersion
splunkge9.0.0
splunklt9.0.8
splunkge9.1.0
splunklt9.1.3

Name	Operator	Version
splunk	ge	9.0.0
splunk	lt	9.0.8
splunk	ge	9.1.0
splunk	lt	9.1.3

References

advisory.splunk.com/advisories/SVD-2024-0108

research.splunk.com/application/947d4d2e-1b64-41fc-b32a-736ddb88ce97/