CVE-2024-23675: Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
First published: Mon Jan 22 2024(Updated: )
In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.
Credit: prodsec@splunk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Splunk Cloud Platform | <9.1.2312.100 | |
| Splunk | >=9.0.0<9.0.8 | |
| Splunk | >=9.1.0<9.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-23675?
CVE-2024-23675 is classified as a high severity vulnerability due to its potential to allow unauthorized deletion of KV Store collections.
How do I fix CVE-2024-23675?
To fix CVE-2024-23675, upgrade Splunk Enterprise to version 9.0.8 or 9.1.3 or later.
What versions are affected by CVE-2024-23675?
CVE-2024-23675 affects Splunk Enterprise versions below 9.0.8 and 9.1.3.
What impact does CVE-2024-23675 have on my system?
CVE-2024-23675 can lead to improper handling of permissions, resulting in the potential unauthorized deletion of KV Store collections.
Is there a workaround for CVE-2024-23675?
Currently, there are no recommended workarounds for CVE-2024-23675 other than upgrading to a secure version.
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/references
- agent/weakness
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/splunk
- canonical/splunk cloud platform
- canonical/splunk
- version/splunk/9.0.0
- version/splunk/9.1.0