Splunk Enterprise Vulnerability Allows Arbitrary Code Execution
CVE-2024-36984
8.8HIGH
What is CVE-2024-36984?
In Splunk Enterprise, versions prior to 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user is able to leverage a vulnerability that arises from the execution of specially crafted queries. This allows for the serialization of untrusted data, which can be exploited to execute arbitrary code on the affected system. The implications of this vulnerability can lead to significant security risks, emphasizing the need for users to ensure their software is updated to the latest versions to mitigate potential exploitation.
Affected Version(s)
Splunk Enterprise 9.2 < 9.2.2
Splunk Enterprise 9.1 < 9.1.5
Splunk Enterprise 9.0 < 9.0.10