CVE-2024-53246

Summary

CVE-2024-53246 is a vulnerability affecting Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, as well as Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206. An attacker who has already exploited another vulnerability, such as a Risky Commands Bypass, can potentially disclose sensitive information through a specific SPL (Splunk Processing Language) command. This issue does not allow for remote code execution or unauthorized access but can lead to data exposure. Organizations using these affected versions are advised to apply the relevant patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.