CVE-2024-45731
CVSS 3.1 Score 8 of 10 (high)
Details
Published Oct 14, 2024
Updated: Oct 17, 2024
CWE ID 23
CWE ID 22
Summary
CVE-2024-45731 is a vulnerability affecting Splunk Enterprise for Windows. In versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user, who doesn't possess the "admin" or "power" roles, can exploit this issue and write a file to the Windows system root directory. The impacted files are located in the System32 folder of the Windows System32 directory, which is a default setting when Splunk Enterprise for Windows is installed on a separate drive. This vulnerability could potentially lead to significant security risks if exploited.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.