CVE-2024-36991: Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36991?
CVE-2024-36991 is considered a high severity vulnerability due to the potential for unauthorized access through path traversal.
How do I fix CVE-2024-36991?
To fix CVE-2024-36991, upgrade your Splunk Enterprise software to version 9.2.2 or later, or to 9.1.5 or later if you are on version 9.1.x, or to 9.0.10 or later if you are on version 9.0.x.
Which versions of Splunk are affected by CVE-2024-36991?
CVE-2024-36991 affects Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 specifically on Windows.
Can CVE-2024-36991 be exploited remotely?
Yes, CVE-2024-36991 can potentially be exploited remotely if an attacker targets the vulnerable /modules/messaging/ endpoint.
Is CVE-2024-36991 specific to any operating system?
CVE-2024-36991 is specific to Splunk Enterprise running on Windows operating systems.