DeutschShown in its original language — a full translation is planned for a future version.
Splunk Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2023-06-01
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren oder offenzulegen, Sicherheitsvorkehrungen zu umgehen, oder einen Denial of Service zu verursachen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32717US | medium4.3 | — | ||
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the {{/services/indexing/pr… | ||||
| CVE-2023-32716US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL co… | ||||
| CVE-2023-32715US | medium6.1 | — | ||
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s ma… | ||||
| CVE-2023-32714US | high8.1 | — | ||
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be u… | ||||
| CVE-2023-32713US | critical9.9 | — | ||
In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privilege… | ||||
| CVE-2023-32712US | low3.1 | — | ||
In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files that, whe… | ||||
| CVE-2023-32711US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, a Splunk dashboard view lets a low-privileged user exploit a vulnerability in the Bootstrap web framework (CVE-2019-8… | ||||
| CVE-2023-32710US | medium5.3 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer… | ||||
| CVE-2023-32709US | medium4.3 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the ha… | ||||
| CVE-2023-32708US | high8.8 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting v… | ||||
| CVE-2023-32707US | high8.8OT high | Exploit | ||
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_us… | ||||
| CVE-2023-32706US | medium6.5 | — | ||
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause… | ||||
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan