The vulnerability of the Session Token Handler component in the application for creating supplements, related to integrating external data sources with the Splunk Add-on Builder platform, arises from improper processing of output data for registration logs. This allows a malicious actor to gain unauthorized access to edit the application.

Improper log output handling in the Session Token Handler lets remote attackers edit the application with Splunk Add-on Builder.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-46231	30 Jan 202418:32	–	circl
CNNVD	Splunk Security Breach	30 Jan 202400:00	–	cnnvd
CVE	CVE-2023-46231	30 Jan 202417:00	–	cve
Cvelist	CVE-2023-46231 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder	30 Jan 202417:00	–	cvelist
EUVD	EUVD-2023-50470	3 Oct 202520:07	–	euvd
NVD	CVE-2023-46231	30 Jan 202417:15	–	nvd
OSV	CVE-2023-46231	30 Jan 202417:15	–	osv
Prion	Design/Logic Flaw	30 Jan 202417:15	–	prion
Positive Technologies	PT-2024-1641 · Splunk · Splunk Add-On Builder	30 Jan 202400:00	–	ptsecurity
Vulnrichment	CVE-2023-46231 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder	30 Jan 202417:00	–	vulnrichment