CVE-2024-23676 Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit...

CVE-2024-23676 Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit...

CVE-2024-23676

CVE-2024-23676 affects Splunk Enterprise: versions below 9.0.8 and 9.1.3 expose index metrics via the mrollup SPL command to low-privilege users, requiring interaction from a high-privileged user. The root cause is insufficient access control around mrollup, enabling sensitive metric disclosure. ...