Splunk Enterprise Vulnerability Allows Arbitrary Code Execution

CVE-2024-36984

Summary

In Splunk Enterprise, versions prior to 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user is able to leverage a vulnerability that arises from the execution of specially crafted queries. This allows for the serialization of untrusted data, which can be exploited to execute arbitrary code on the affected system. The implications of this vulnerability can lead to significant security risks, emphasizing the need for users to ensure their software is updated to the latest versions to mitigate potential exploitation.

References