VULNERABILITY INTELLIGENCE

CVE-2024-23675

CVSS score6.5 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2024-01-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.

Weakness classification

  • prodsec@splunk.com: CWE-284
  • nvd@nist.gov: CWE-863

Primary references