CVE-2024-53243 - Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

Back Back to CVE browser

MEDIUM

Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

Published Dec 10, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see alert search query responses using Splunk Secure Gateway App Key Value Store (KVstore) collections endpoints due to improper access control.

Affected products

Vendor Splunk Product Splunk Enterprise Default
unknown
Affected
- ≥ 9.1, < 9.1.7
- ≥ 9.2, < 9.2.4
- ≥ 9.3, < 9.3.2
Vendor Splunk Product Splunk Secure Gateway Default
unknown
Affected
- ≥ 3.4, < 3.4.262
- ≥ 3.7, < 3.7.18
- ≥ 3.8, < 3.8.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Splunk	Splunk Enterprise	unknown	Affected ≥ 9.1, < 9.1.7 ≥ 9.2, < 9.2.4 ≥ 9.3, < 9.3.2
Splunk	Splunk Secure Gateway	unknown	Affected ≥ 3.4, < 3.4.262 ≥ 3.7, < 3.7.18 ≥ 3.8, < 3.8.5