Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-45732

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a search as the "nobody" Splunk user in the SplunkDeploymentServerConfig app. This could let the low-privileged user access potentially restricted data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 9.3 to < 9.3.1affected
  • 9.2 to < 9.2.3affected

Splunk Splunk Cloud Platform

  • 9.2.2403 to < 9.2.2403.103affected
  • 9.1.2312 to < 9.1.2312.110, 9.1.2312.200affected
  • 9.1.2308 to < 9.1.2308.208affected

References