CVE-2022-37438: Information disclosure via the dashboard drilldown in Splunk Enterprise
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37438?
CVE-2022-37438 is a vulnerability in Splunk Enterprise that allows an authenticated user to craft a dashboard that could potentially leak information about Splunk users when visited by another user through the drilldown component.
How does CVE-2022-37438 affect Splunk Enterprise?
CVE-2022-37438 affects Splunk Enterprise versions 8.1.0 to 8.1.11, 8.2.0 to 8.2.7.1, and version 9.0.0, as well as Splunk Cloud Platform versions up to 8.2.2203.4.
What is the severity of CVE-2022-37438?
CVE-2022-37438 has a severity rating of low with a CVSS score of 3.5.
How can an authenticated user exploit CVE-2022-37438?
An authenticated user can exploit CVE-2022-37438 by crafting a dashboard that leaks information, such as usernames, email addresses, and real names, about Splunk users when another user visits the dashboard through the drilldown component.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-37438?
The Common Weakness Enumeration (CWE) ID for CVE-2022-37438 is CWE-200.