CVE-2024-45738
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Oct 14, 2024
Updated: Oct 17, 2024
CWE ID 200
CWE ID 532
Summary
CVE-2024-45738 is a vulnerability affecting Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6. This issue enables the potential exposure of sensitive HTTP parameters to the `_internal` index. The vulnerability arises when the Splunk Enterprise REST_Calls log channel is configured at the DEBUG logging level. By exploiting this weakness, malicious actors might gain unauthorized access to sensitive information. It is crucial for Splunk Enterprise users to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.