Lucene search

SplunkCVE-2022-37438

HistoryAug 16, 2022 - 9:15 p.m.

CVE-2022-37438

2022-08-1621:15:13

CWE-200

Splunk

web.nvd.nist.gov

cve-2022-37438

splunk

enterprise

authenticated user

dashboard

vulnerability

information leakage

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web.

Affected configurations

Nvd

Node

splunksplunkRange8.1.0–8.1.11enterprise

splunksplunkRange8.2.0–8.2.7.1enterprise

splunksplunkMatch9.0.0enterprise

splunksplunk_cloud_platformRange≤8.2.2203.4

VendorProductVersionCPE
splunksplunk*cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
splunksplunk9.0.0cpe:2.3:a:splunk:splunk:9.0.0:*:*:*:enterprise:*:*:*
splunksplunk_cloud_platform*cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
splunk	splunk	*	cpe:2.3:a:splunk:splunk:::::enterprise:::*
splunk	splunk	9.0.0	cpe:2.3:a:splunk:splunk:9.0.0::::enterprise:::
splunk	splunk_cloud_platform	*	cpe:2.3:a:splunk:splunk_cloud_platform::::::::

CNA Affected

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "lessThan": "9.0.1",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2.7.1",
        "status": "affected",
        "version": "8.2",
        "versionType": "custom"
      },
      {
        "lessThan": "8.1.11",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "lessThan": "9.0.2205",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

research.splunk.com/application/f844c3f6-fd99-43a2-ba24-93e35fe84be6

www.splunk.com/en_us/product-security/announcements/svd-2022-0802.html

Social References

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2022-37438