Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-53246

Sensitive Information Disclosure through SPL commands

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 9.3 to < 9.3.2affected
  • 9.2 to < 9.2.4affected
  • 9.1 to < 9.1.7affected

Splunk Splunk Cloud Platform

  • 9.3.2408 to < 9.3.2408.101affected
  • 9.2.2406 to < 9.2.2406.106affected
  • 9.2.2403 to < 9.2.2403.111affected
  • 9.1.2312 to < 9.1.2312.206affected

References