DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Splunk Splunk Enterprise: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-06-01
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren oder offenzulegen, Sicherheitsvorkehrungen zu umgehen, oder einen Denial of Service zu verursachen.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-32717US | medium4.3 | — | ||
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the {{/services/indexing/pr… | ||||
| CVE-2023-32716US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL co… | ||||
| CVE-2023-32715US | medium6.1 | — | ||
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s ma… | ||||
| CVE-2023-32714US | high8.1 | — | ||
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be u… | ||||
| CVE-2023-32713US | critical9.9 | — | ||
In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privilege… | ||||
| CVE-2023-32712US | low3.1 | — | ||
In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files that, whe… | ||||
| CVE-2023-32711US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, a Splunk dashboard view lets a low-privileged user exploit a vulnerability in the Bootstrap web framework (CVE-2019-8… | ||||
| CVE-2023-32710US | medium5.3 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer… | ||||
| CVE-2023-32709US | medium4.3 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the ha… | ||||
| CVE-2023-32708US | high8.8 | — | ||
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting v… | ||||
| CVE-2023-32707US | high8.8OT hoch | Exploit | ||
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_us… | ||||
| CVE-2023-32706US | medium6.5 | — | ||
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
- Splunk Security Advisory vom 2023-06-01external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan