Lucene search
HistoryJul 01, 2024 - 5:15 p.m.
CVE-2024-36991
splunk
enterprise
windows
path traversal
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.098
Percentile
94.9%
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
Affected configurations
Node
splunksplunkRange9.0.0â9.0.10enterprise
ORsplunksplunkRange9.1.0â9.1.5enterprise
ORsplunksplunkRange9.2.0â9.2.2enterprise
microsoftwindowsMatch-
Related
cvelist
cvelist
cve
cve
CVE-2024-36991
2024-07-01 17:15:07
nessus
nessus
githubexploit
githubexploit
Exploit for Path Traversal in Splunk
2024-07-06 00:49:40
Exploit for Path Traversal in Splunk
2024-07-06 15:24:24
vulnrichment
vulnrichment
nuclei
nuclei
Splunk Enterprise - Local File Inclusion
2024-07-05 13:46:06
openvas
openvas
Generic HTTP Directory Traversal (Web Dirs) - Active Check
2021-07-22 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.098
Percentile
94.9%
Related for NVD:CVE-2024-36991