CVE-2024-45732

Summary

CVE-2024-45732 is a vulnerability affecting Splunk Enterprise versions below 9.3.1 and 9.2.0 versions below 9.2.3, as well as Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110, and 9.1.2308.208. This issue enables a low-privileged user, who does not possess the "admin" or "power" Splunk roles, to execute a search as the "nobody" user within the SplunkDeploymentServerConfig app. By exploiting this vulnerability, the malicious user can potentially gain unauthorized access to restricted data. Splunk users are advised to update to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.