DeutschShown in its original language — a full translation is planned for a future version.
Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2022-11-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um Code zur Ausführung zu bringen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Daten zu manipulieren oder einen Denial of Service zu verursachen. Zur Ausnutzung einiger Schwachstellen ist eine Interaktion des Opfers notwendig.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-43572US | medium6.5 | — | ||
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S) or HTTP Event Collector (HEC) protocols to an indexer resu… | ||||
| CVE-2022-43570US | medium6.5 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE) injection via a custom Vie… | ||||
| CVE-2022-43569US | medium5.4 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts that can lead to persistent cross-site scripting (XSS) in… | ||||
| CVE-2022-43568US | medium6.1 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when out… | ||||
| CVE-2022-43567US | high8.8 | — | ||
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted reques… | ||||
| CVE-2022-43566US | high8.0 | — | ||
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for… | ||||
| CVE-2022-43565US | high8.8 | — | ||
In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky c… | ||||
| CVE-2022-43564US | medium6.5 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use o… | ||||
| CVE-2022-43563US | high8.8 | — | ||
In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://doc… | ||||
| CVE-2022-43562US | medium5.4 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user c… | ||||
| CVE-2022-43571US | high8.8 | Exploit | ||
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.
| ||||
| CVE-2022-43561US | medium4.8 | — | ||
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site sc… | ||||
| CVE-2020-36518US | high7.5 | Exploit | ||
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | ||||
02
references
External citations — patches, advisories, analysis.
- psytester Blog vom 2022-12-27external
- WID-SEC-W-2022-1950 - CSAF Versionself
- WID-SEC-2022-1950 - Portal Versionself
- Splunk Security Advisory vom 2022-11-02external
- Splunk Security Advisory vom 2022-11-02external
- Splunk Security Advisory vom 2022-11-02external
- Splunk Security Advisory vom 2022-11-02external
- Splunk Security Advisory vom 2022-11-02external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan