medium5.3
CVE-2024-53246
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206…
Impact
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | from 9.1.0 before 9.1.7 from 9.2.0 before 9.2.4 from 9.3.0 before 9.3.2 |
| Splunk | Splunk Cloud Platform | from 9.1.2312 before 9.1.2312.206 from 9.2.2403 before 9.2.2403.111 from 9.2.2406 before 9.2.2406.106 from 9.3.2408 before 9.3.2408.101 |