Splunk Enterprise REST API Unauthorized Access

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Splunk Enterprise Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Splunk Enterprise Access Control Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to access control errors, which allow attackers to compromise the integrity of the protected information...

Splunk Enterprise Unauthorized Access

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Splunk Web CSRF

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to execute a CSRF attack remotely...

Splunk Enterprise Access Control Code Execution

The vulnerability of the Splunk Enterprise platform for operational analysis is related to deficiencies in access control for the directory $SPLUNKHOME/var/run/splunk/apptemp. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Splunk Enterprise Information Disclosure

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

SAML Standard Splunk Enterprise Brute Force

The vulnerability of the SAML standard implementation in the Splunk Enterprise platform for operational analysis is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...

Splunk Enterprise Data Deletion

The vulnerability of the application programming interface of the Splunk Enterprise platform for operational analysis is related to deficiencies in access control to the KV Store. Exploiting this vulnerability could allow a malicious actor to delete data from the KV Store...

Splunk Enterprise DoS

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the SPL “dump” command...

Splunk Enterprise XML Processing Code Execution

The vulnerability of the Splunk Enterprise platform for operational analysis is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Splunk Web Code Execution

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform is related to an incorrect initialization of resources when processing the OPENSSLDIR value. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain...

Understanding Malware-as-a-Service

Money is the root of all evil, including cybercrime. Thus, it was inevitable that malware creators would one day begin not only to distribute malicious programs themselves, but also to sell them to less technically proficient attackers, thereby lowering the threshold for entering the cybercrimina...