DeutschShown in its original language — a full translation is planned for a future version.
Splunk Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2023-08-30
Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.
01
describes (160)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-40598US | high8.8OT elevated | — | ||
In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal fu… | ||||
| CVE-2023-40597US | high8.8 | — | ||
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk. | ||||
| CVE-2023-40596US | high8.8 | — | ||
In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR b… | ||||
| CVE-2023-40595US | high8.8 | — | ||
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacke… | ||||
| CVE-2023-40594US | high7.5 | — | ||
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise… | ||||
| CVE-2023-40593US | high7.5 | — | ||
In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint… | ||||
| CVE-2023-40592US | medium6.1 | — | ||
In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/searc… | ||||
| CVE-2023-29405US | critical9.8 | — | ||
The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds u… | ||||
| CVE-2023-29404US | critical9.8 | — | ||
The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds u… | ||||
| CVE-2023-29403US | high7.8 | — | ||
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory… | ||||
| CVE-2023-29402US | critical9.8 | — | ||
The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when runni… | ||||
| CVE-2023-29400US | high7.3 | — | ||
Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normaliz… | ||||
| CVE-2023-24540US | critical9.8 | — | ||
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029"… | ||||
| CVE-2023-24539US | high7.3 | — | ||
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpe… | ||||
| CVE-2023-27538US | medium5.5 | — | ||
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, w… | ||||
| CVE-2023-27537US | medium5.9 | — | ||
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing acros… | ||||
| CVE-2023-27536US | medium5.9 | — | ||
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due… | ||||
| CVE-2023-27535US | medium5.9 | — | ||
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Pre… | ||||
| CVE-2023-27534US | high8.8 | — | ||
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in a… | ||||
| CVE-2023-27533US | high8.8 | — | ||
A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet op… | ||||
showing 20 of 160
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
- Splunk Security Advisory vom 2023-08-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan