Description
In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a search as the "nobody" Splunk user in the SplunkDeploymentServerConfig app. This could let the low-privileged user access potentially restricted data.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk Enterprise | >= 9.3, < 9.3.1; >= 9.2, < 9.2.3 |
| Splunk | Splunk Cloud Platform | >= 9.2.2403, < 9.2.2403.103; >= 9.1.2312, < 9.1.2312.110, 9.1.2312.200; >= 9.1.2308, < 9.1.2308.208 |
| splunk | splunk_enterprise | >= 9.3, < 9.3.1; >= 9.2, < 9.2.3 |
| splunk | splunk_cloud_platform | >= 9.2.2403, < 9.2.2403.103; >= 9.1.2312, < 9.1.2312.200; >= 9.1.2308, < 9.1.2308.208 |
References
Timeline
- Published
- Oct 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed