CVE-2022-37438: Information disclosure via the dashboard drilldown in Splunk Enterprise
First published: Tue Aug 16 2022(Updated: )
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web.
Credit: prodsec@splunk.com prodsec@splunk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Splunk Splunk | >=8.1.0<8.1.11 | |
| Splunk Splunk | >=8.2.0<8.2.7.1 | |
| Splunk Splunk | =9.0.0 | |
| Splunk Splunk Cloud Platform | <=8.2.2203.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-37438?
CVE-2022-37438 is a vulnerability in Splunk Enterprise that allows an authenticated user to craft a dashboard that could potentially leak information about Splunk users when visited by another user through the drilldown component.
How does CVE-2022-37438 affect Splunk Enterprise?
CVE-2022-37438 affects Splunk Enterprise versions 8.1.0 to 8.1.11, 8.2.0 to 8.2.7.1, and version 9.0.0, as well as Splunk Cloud Platform versions up to 8.2.2203.4.
What is the severity of CVE-2022-37438?
CVE-2022-37438 has a severity rating of low with a CVSS score of 3.5.
How can an authenticated user exploit CVE-2022-37438?
An authenticated user can exploit CVE-2022-37438 by crafting a dashboard that leaks information, such as usernames, email addresses, and real names, about Splunk users when another user visits the dashboard through the drilldown component.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-37438?
The Common Weakness Enumeration (CWE) ID for CVE-2022-37438 is CWE-200.
- collector/nvd-index
- agent/references
- agent/type
- agent/author
- agent/softwarecombine
- agent/weakness
- agent/description
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/event
- agent/first-publish-date
- vendor/splunk
- canonical/splunk splunk
- version/splunk splunk/8.1.0
- version/splunk splunk/8.2.0
- version/splunk splunk/9.0.0
- canonical/splunk splunk cloud platform
- version/splunk splunk cloud platform/8.2.2203.4