CVE-2024-53246

🗓️ 10 Dec 2024 18:01:16Reported by SplunkType

Sensitive information disclosure in vulnerable Splunk versions requires exploitation of another vulnerability.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the Splunk Enterprise platform for operational analysis, related to the transmission of data in an open manner, allows a perpetrator to disclose protected information.	25 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-53246	10 Dec 202418:17	–	circl
CNNVD	Splunk Enterprise和Splunk Cloud Platform 安全漏洞	10 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-53246 Sensitive Information Disclosure through SPL commands	10 Dec 202418:01	–	cvelist
EUVD	EUVD-2024-51918	3 Oct 202520:07	–	euvd
NVD	CVE-2024-53246	10 Dec 202418:15	–	nvd
OSV	CVE-2024-53246	10 Dec 202418:15	–	osv
Tenable Nessus	Splunk Enterprise 9.1.0 < 9.1.7, 9.2.0 < 9.2.4, 9.3.0 < 9.3.2 (SVD-2024-1204)	10 Dec 202400:00	–	nessus
Vulnrichment	CVE-2024-53246 Sensitive Information Disclosure through SPL commands	10 Dec 202418:01	–	vulnrichment

NVD

Node

splunk splunkRange9.1.0–9.1.7enterprise

splunk splunkRange9.2.0–9.2.4enterprise

splunk splunkRange9.3.0–9.3.2enterprise

splunk splunk_cloud_platformRange9.1.2312–9.1.2312.206

splunk splunk_cloud_platformRange9.2.2403–9.2.2403.111

splunk splunk_cloud_platformRange9.2.2406–9.2.2406.106

splunk splunk_cloud_platformRange9.3.2408–9.3.2408.101

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.3",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.3.2"
      },
      {
        "version": "9.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.4"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.7"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "9.3.2408",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.3.2408.101"
      },
      {
        "version": "9.2.2406",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.2406.106"
      },
      {
        "version": "9.2.2403",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.2.2403.111"
      },
      {
        "version": "9.1.2312",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.2312.206"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2024-1204

10 Mar 2025 16:41Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.3 - 7.5

EPSS0.00074

SSVC

CWE-319