Vulnerability fixed in Splunk Enterprise

🗓️ 11 Dec 2024 08:53:56Reported by NCSCType

A vulnerability in Splunk Enterprise and Splunk Secure Gateway allowed low-privileged users to remotely execute code; updates released.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, arises from deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-53247	10 Dec 202418:17	–	circl
CNNVD	Splunk Cloud Platform和Splunk Enterprise 安全漏洞	10 Dec 202400:00	–	cnnvd
CVE	CVE-2024-53247	10 Dec 202418:00	–	cve
Cvelist	CVE-2024-53247 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app	10 Dec 202418:00	–	cvelist
EUVD	EUVD-2024-51919	3 Oct 202520:07	–	euvd
NVD	CVE-2024-53247	10 Dec 202418:15	–	nvd
Positive Technologies	PT-2024-9365 · Splunk · Splunk Secure Gateway App +1	19 Nov 202400:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 9.1.0 < 9.1.7, < 9.2.4, < 9.3.2 (SVD-2024-1205)	11 Dec 202400:00	–	nessus
Vulnrichment	CVE-2024-53247 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app	10 Dec 202418:00	–	vulnrichment