The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, relates to deficiencies in access control. This vulnerability allows a malicious actor to delete data from the KV Store (Key Value Store).

🗓️ 24 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Mobile deployment flaw in Splunk Secure Gateway enables remote deletion of Key Value Store data due to weak access control.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-45735	14 Oct 202420:01	–	circl
CNNVD	Splunk Enterprise和Splunk Secure Gateway 安全漏洞	14 Oct 202400:00	–	cnnvd
CVE	CVE-2024-45735	14 Oct 202416:45	–	cve
Cvelist	CVE-2024-45735 Improper Access Control for low-privileged user in Splunk Secure Gateway App	14 Oct 202416:45	–	cvelist
EUVD	EUVD-2024-41702	3 Oct 202520:07	–	euvd
NVD	CVE-2024-45735	14 Oct 202417:15	–	nvd
OSV	CVE-2024-45735	14 Oct 202417:15	–	osv
Positive Technologies	PT-2024-7159 · Splunk · Splunk Cloud Platform +2	14 Oct 202400:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3 (SVD-2024-1005)	14 Oct 202400:00	–	nessus
Vulnrichment	CVE-2024-45735 Improper Access Control for low-privileged user in Splunk Secure Gateway App	14 Oct 202416:45	–	vulnrichment

Vulners

Node

splunk splunk_enterpriseRange9.2.0–9.2.2

OR

splunk splunk_enterpriseRange9.1.0–9.1.5

OR

splunk splunk_secure_gatewayRange3.6.0–3.6.16

OR

splunk splunk_secure_gatewayRange≤3.4.259

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2024-1005
research	www.research.splunk.com/application/0a3d6035-7bef-4dfa-b01e-84349edac3b4/
web	www.web.nvd.nist.gov/view/vuln/detail

31 Mar 2025 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 24

CVSS 34.3

EPSS0.00349

Splunk Secure Gateway Mobile deployment Access control weakness Key Value Store Remote data deletion