CVE-2024-53245: Information Disclosure due to Username Collision with a Role that has the same Name as the User
In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read access to dashboards, could see the dashboard name and the dashboard XML by cloning the dashboard.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53245?
CVE-2024-53245 is classified as a low severity vulnerability.
How do I fix CVE-2024-53245?
To fix CVE-2024-53245, upgrade to Splunk Enterprise version 9.3.0, 9.2.4, or 9.1.7, or Splunk Cloud Platform version 9.1.2312.206 or later.
Who is affected by CVE-2024-53245?
CVE-2024-53245 affects low-privileged users in Splunk Enterprise and Splunk Cloud Platform who share usernames with roles that have read access to dashboards.
What are the affected versions for CVE-2024-53245?
The affected versions for CVE-2024-53245 include Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7, as well as Splunk Cloud Platform versions below 9.1.2312.206.
Is CVE-2024-53245 exploitable without admin privileges?
Yes, CVE-2024-53245 can be exploited by low-privileged users who do not hold the admin or power roles.