CVE-2024-45734: Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
First published: Mon Oct 14 2024(Updated: )
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed by exporting the dashboard as a PDF, using the local image path in the img tag in the source extensible markup language (XML) code for the Splunk classic dashboard.
Credit: prodsec@splunk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Splunk | >=9.1.0<9.1.6 | |
| Splunk | >=9.2.0<9.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-45734?
The severity of CVE-2024-45734 is low, as it impacts low-privileged users in Splunk Enterprise.
How do I fix CVE-2024-45734?
To fix CVE-2024-45734, upgrade Splunk Enterprise to a version higher than 9.3.0, 9.2.3, or 9.1.6.
What versions of Splunk are affected by CVE-2024-45734?
CVE-2024-45734 affects Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6.
Who is impacted by CVE-2024-45734?
CVE-2024-45734 impacts low-privileged users who do not hold the 'admin' or 'power' roles in Splunk.
What is the attack vector for CVE-2024-45734?
The attack vector for CVE-2024-45734 involves the PDF export feature in Splunk classic dashboards.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/splunk
- canonical/splunk
- version/splunk/9.1.0
- version/splunk/9.2.0