CVE-2024-45737
CVSS 3.1 Score 3.5 of 10 (low)
Details
Summary
CVE-2024-45737 is a vulnerability affecting Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, as well as Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.204. This issue enables a low-privileged user, who does not possess the "admin" or "power" roles, to manipulate the maintenance mode state of App Key Value Store (KVStore) via a Cross-Site Request Forgery (CSRF) attack. Successful exploitation could potentially lead to unauthorized changes, thereby impacting the system's security and functionality. Users are strongly advised to update their Splunk installations to the latest patched versions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Splunk Cloud
Affected Vendors
- Splunk