On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of service in the Splunk daemon.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://advisory.splunk.com/advisories/SVD-2023-0601 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: Splunk
Published: 2023-06-01T16:34:28.142Z
Updated: 2024-09-03T19:39:54.425Z
Reserved: 2023-05-11T20:55:59.871Z
Link: CVE-2023-32706
Vulnrichment
Updated: 2024-08-02T15:25:36.896Z
NVD
Status : Modified
Published: 2023-06-01T17:15:10.027
Modified: 2024-04-10T01:15:13.037
Link: CVE-2023-32706
Redhat
No data.