CVE-2024-45731

🗓️ 14 Oct 2024 16:46:01Reported by SplunkType

Insecure file writing in Splunk Enterprise for Window

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the Splunk Enterprise operating analysis platform lies in the incorrect limitation of the path name to the restricted access directory, allowing a malicious user to write any file into the root directory of the Windows system.	30 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-45731	14 Oct 202420:01	–	circl
CNNVD	Splunk Enterprise 安全漏洞	14 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-45731 Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk	14 Oct 202416:46	–	cvelist
EUVD	EUVD-2024-41736	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise	15 Oct 202415:18	–	ncsc
NVD	CVE-2024-45731	14 Oct 202417:15	–	nvd
Tenable Nessus	Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3, 9.3.0 < 9.3.1 (SVD-2024-1001)	14 Oct 202400:00	–	nessus
Vulnrichment	CVE-2024-45731 Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk	14 Oct 202416:46	–	vulnrichment

NVD

Node

splunk splunkRange9.1.0–9.1.6enterprise

splunk splunkRange9.2.0–9.2.3enterprise

splunk splunkMatch9.3.0enterprise

AND

microsoft windowsMatch-

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.3",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.3.1"
      },
      {
        "version": "9.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.3"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.6"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2024-1001
research	www.research.splunk.com/application/c97e0704-d9c6-454d-89ba-1510a987bf72/

28 Feb 2025 11:03Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18

EPSS0.006

SSVC