In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Splunk
Published: 2024-07-01T16:30:57.461Z
Updated: 2024-08-02T03:43:50.397Z
Reserved: 2024-05-30T16:36:20.999Z
Link: CVE-2024-36985
Vulnrichment
Updated: 2024-07-03T16:26:55.096Z
NVD
Status : Awaiting Analysis
Published: 2024-07-01T17:15:06.703
Modified: 2024-07-08T14:18:40.360
Link: CVE-2024-36985
Redhat
No data.