Vulnerabilities fixed in Splunk

🗓️ 23 Jan 2024 00:00:00Reported by NCSCType

Splunk fixes vulnerabilities in Splunk Enterprise; updates patch DoS, data manipulation, and data access in nine zero eight and nine one three.

Reporter	Title	Published	Views	Family All 47
BDU FSTEC	The vulnerability of the RapidDiag diagnostic tool on the Splunk Enterprise operating environment allows a malicious individual to gain unauthorized access to protected information.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application programming interface of the Splunk Enterprise platform for operational analysis allows a perpetrator to delete data from the KV Store.	25 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Splunk Enterprise platform for operational analysis allows a perpetrator to gain unauthorized access to protected information.	25 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Splunk Enterprise platform for operational analysis in Windows operating systems lies in the restoration of unreliable data in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of the protected information.	25 Jan 202400:00	–	bdu_fstec
Circl	CVE-2024-23675	22 Jan 202422:26	–	circl
Circl	CVE-2024-23676	22 Jan 202422:26	–	circl
Circl	CVE-2024-23677	22 Jan 202422:26	–	circl
Circl	CVE-2024-23678	22 Jan 202422:26	–	circl
CNNVD	Splunk Security Breach	22 Jan 202400:00	–	cnnvd
CNNVD	Splunk Security Breach	22 Jan 202400:00	–	cnnvd

23 Jan 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5 - 8.8

EPSS0.00229

SSVC