CVSS 6.5 · Medium EPSS 0,20%
Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada splunk. Skor CVSS 3.1 6.5 (Medium) menurut NVD.
In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the "admin" Splunk role could access the Splunk Monitoring Console App endpoints due to an improper access control. This could lead to a sensitive information disclosure.<br><br>The Monitoring Console app is a bundled app that comes with Splunk Enterprise. It is not available for download on SplunkBase, and is not installed on Splunk Cloud Platform instances. This vulnerability does not affect [Cloud Monitoring Console](https://help.splunk.com/en/splunk-cloud-platform/administer/admin-manual/10.2.2510/monitor-your-splunk-cloud-platform-deployment/introduction-to-the-cloud-monitoring-console).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| splunk | splunk | Versi 9.3.0 hingga sebelum 9.3.9 |
| splunk | splunk | Versi 9.4.0 hingga sebelum 9.4.8 |
| splunk | splunk | Versi 10.0.0 hingga sebelum 10.0.3 |