CVE-2024-23675: Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Splunk Enterprise Splunk App Key Value Store (KV Store)to a version that resolves this vulnerability.Fixed in 9.0.8 - Upgrade
Upgrade
Splunk Enterprise Splunk App Key Value Store (KV Store)to a version that resolves this vulnerability.Fixed in 9.1.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23675?
CVE-2024-23675 is classified as a high severity vulnerability due to its potential to allow unauthorized deletion of KV Store collections.
How do I fix CVE-2024-23675?
To fix CVE-2024-23675, upgrade Splunk Enterprise to version 9.0.8 or 9.1.3 or later.
What versions are affected by CVE-2024-23675?
CVE-2024-23675 affects Splunk Enterprise versions below 9.0.8 and 9.1.3.
What impact does CVE-2024-23675 have on my system?
CVE-2024-23675 can lead to improper handling of permissions, resulting in the potential unauthorized deletion of KV Store collections.
Is there a workaround for CVE-2024-23675?
Currently, there are no recommended workarounds for CVE-2024-23675 other than upgrading to a secure version.