CVE-2024-36991: Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
First published: Mon Jul 01 2024(Updated: )
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
Credit: prodsec@splunk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Splunk Splunk | >=9.0.0<9.0.10 | |
| Splunk Splunk | >=9.1.0<9.1.5 | |
| Splunk Splunk | >=9.2.0<9.2.2 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-36991?
CVE-2024-36991 is considered a high severity vulnerability due to the potential for unauthorized access through path traversal.
How do I fix CVE-2024-36991?
To fix CVE-2024-36991, upgrade your Splunk Enterprise software to version 9.2.2 or later, or to 9.1.5 or later if you are on version 9.1.x, or to 9.0.10 or later if you are on version 9.0.x.
Which versions of Splunk are affected by CVE-2024-36991?
CVE-2024-36991 affects Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 specifically on Windows.
Can CVE-2024-36991 be exploited remotely?
Yes, CVE-2024-36991 can potentially be exploited remotely if an attacker targets the vulnerable /modules/messaging/ endpoint.
Is CVE-2024-36991 specific to any operating system?
CVE-2024-36991 is specific to Splunk Enterprise running on Windows operating systems.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/description
- agent/softwarecombine
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/splunk
- canonical/splunk splunk
- version/splunk splunk/9.0.0
- version/splunk splunk/9.1.0
- version/splunk splunk/9.2.0
- vendor/microsoft
- canonical/microsoft windows