CVE-2024-29946: Risky command safeguards bypass in Dashboard Examples Hub
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into initiating a request within their browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29946?
CVE-2024-29946 is considered a moderate severity vulnerability due to the potential risk of attackers bypassing SPL safeguards.
How do I fix CVE-2024-29946?
To fix CVE-2024-29946, upgrade Splunk Enterprise to version 9.2.1, 9.1.4, or 9.0.9 or later.
What specific versions of Splunk Enterprise are affected by CVE-2024-29946?
CVE-2024-29946 affects Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9.
What is the primary risk associated with CVE-2024-29946?
The primary risk associated with CVE-2024-29946 is that attackers can execute risky SPL commands, compromising the security of the dashboard.
Does CVE-2024-29946 require user interaction to be exploited?
Yes, CVE-2024-29946 typically requires user interaction, as attackers need to phishing the victim to exploit this vulnerability.