NetSight
medium6.5

CVE-2023-22941

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk dae…

Impact

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk daemon (splunkd).

Affected products

VendorProductAffected versions
SplunkSplunk
from 8.1.0 before 8.1.13
from 8.2.0 before 8.2.10
from 9.0.0 before 9.0.4
SplunkSplunk Cloud Platform
before 9.0.2209.3

Weakness classification

References