CVE-2024-22164 Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

In Splunk Enterprise Security ES versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service DoS to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessib...

CVE-2024-22164

CVE-2024-22164 affects Splunk Enterprise Security (ES) prior to version 7.1.2. The vulnerability is triggered via the investigation attachments endpoint, where insufficient request size limiting can cause a denial of service (DoS) that makes an Investigation inaccessible. Affected component is th...

CVE-2024-22164 Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

In Splunk Enterprise Security ES versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service DoS to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessib...