CVSS 4.3 · Medium EPSS 0,30%
Kerentanan Incorrect Authorization pada splunk, splunk cloud platform. Skor CVSS 3.1 4.3 (Medium) menurut cisco.com.
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only access to a specific alert, could suppress that alert when it triggers. See [Define alert suppression groups to throttle sets of similar alerts](https://help.splunk.com/en/splunk-enterprise/alert-and-respond/alerting-manual/9.4/manage-alert-trigger-conditions-and-throttling/define-alert-suppression-groups-to-throttle-sets-of-similar-alerts).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| splunk | splunk | Versi 9.1.0 hingga sebelum 9.1.9 |
| splunk | splunk | Versi 9.2.0 hingga sebelum 9.2.6 |
| splunk | splunk | Versi 9.3.0 hingga sebelum 9.3.5 |
| splunk | splunk | Versi 9.4.0 hingga sebelum 9.4.2 |
| splunk | splunk cloud platform | Versi 9.2.2406 hingga sebelum 9.2.2406.118 |
| splunk | splunk cloud platform | Versi 9.3.2408 hingga sebelum 9.3.2408.112 |
| splunk | splunk cloud platform | Versi 9.3.2411 hingga sebelum 9.3.2411.103 |