CVSS 4.3 · Medium EPSS 0,42%
Kerentanan Improper Input Validation pada splunk, splunk cloud platform. Skor CVSS 3.1 4.3 (Medium) menurut NVD.
In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could bypass the external content warning modal dialog box in Dashboard Studio dashboards which could lead to an information disclosure.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| splunk | splunk | Versi 9.1.0 hingga sebelum 9.1.8 |
| splunk | splunk | Versi 9.2.0 hingga sebelum 9.2.4 |
| splunk | splunk | Versi 9.3.0 hingga sebelum 9.3.3 |
| splunk | splunk | Versi 9.4.0 |
| splunk | splunk cloud platform | Versi 9.1.2308 hingga sebelum 9.1.2308.214 |
| splunk | splunk cloud platform | Versi 9.1.2312 hingga sebelum 9.1.2312.208 |
| splunk | splunk cloud platform | Versi 9.2.2403 hingga sebelum 9.2.2403.115 |
| splunk | splunk cloud platform | Versi 9.2.2406.100 hingga sebelum 9.2.2406.113 |
| splunk | splunk cloud platform | Versi 9.3.2408.100 hingga sebelum 9.3.2408.107 |