CVE-2023-46231: Session Token Disclosure to Internal Log Files in Splunk Add-on Builder
Published Jan 30, 2024
·Updated
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
Affected Software
1 affected component
splunk Add-on Builder<4.1.4
Event History
Jan 30, 2024
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-46231?
CVE-2023-46231 has been classified with a high severity due to the exposure of sensitive user session tokens.
2
How do I fix CVE-2023-46231?
To fix CVE-2023-46231, update the Splunk Add-on Builder to version 4.1.4 or later.
3
What versions are affected by CVE-2023-46231?
CVE-2023-46231 affects Splunk Add-on Builder versions below 4.1.4.
4
What information is compromised in CVE-2023-46231?
CVE-2023-46231 compromises user session tokens by writing them to internal log files.
5
How can I prevent CVE-2023-46231 in my environment?
To prevent CVE-2023-46231, ensure your Splunk Add-on Builder is updated to the latest version.