CVE-2024-23676

Summary

CVE-2024-23676 is a vulnerability affecting Splunk versions below 9.0.8 and 9.1.3. This issue allows a low-privileged user to view metrics on an index they are not authorized to access through the use of the "mrollup" Splunk Processing Language (SPL) command. However, exploitation of this vulnerability requires interaction from a high-privileged user. This security weakness poses a risk to the confidentiality of index data in affected Splunk installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.