CVE-2024-36983
Published: 01 July 2024
Summary
CVE-2024-36983 is a high-severity Command Injection (CWE-77) vulnerability in Splunk Splunk. Its CVSS base score is 8.0 (High).
Operationally, ranked in the top 17.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-36371
Vulnerability details
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external lookup that calls a legacy internal function. The authenticated user could use this internal function…
more
to insert code into the Splunk platform installation directory. From there, the user could execute arbitrary code on the Splunk platform Instance.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.