splunk enterprise security vulnerabilities and exploits

(subscribe to this query)

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation...

Splunk Enterprise Security

In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The v...

Splunk Enterprise Security

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

Splunk Splunk Cloud Platform Splunk Splunk

In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by...

Splunk Splunk Cloud Platform Splunk Splunk

3 Github repositories

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability aff...

Haxx Libcurl Fedoraproject Fedora 36 Debian Debian Linux 10.0 Netapp Active Iq Unified Manager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp Ontap 9 Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards ...

Splunk Splunk Splunk Splunk Cloud Platform

In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the...

Splunk Splunk Splunk Splunk Cloud Platform

In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The v...

Splunk Splunk Splunk Splunk Cloud Platform

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extr...

Libarchive Libarchive Fedoraproject Fedora 35 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Enterprise Linux For Ibm Z Systems 8.0 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6 Redhat Enterprise Linux For Ibm Z Systems Eus 8.6 Redhat Enterprise Linux Server Aus 8.6 Redhat Enterprise Linux Server Tus 8.6 Redhat Enterprise Linux Eus 8.6 Redhat Enterprise Linux For Power Little Endian Eus 8.6 Redhat Codeready Linux Builder -Debian Debian Linux 10.0 Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

Splunk Enterprise peers in Splunk Enterprise versions prior to 9.0 and Splunk Cloud Platform versions prior to 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates ...

Splunk Splunk Splunk Splunk Cloud Platform

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook