Sensitive Information Disclosure in Splunk Enterprise and Cloud Platform

CVE-2024-53246

What is CVE-2024-53246?

A vulnerability exists in Splunk Enterprise and Splunk Cloud Platform that allows the disclosure of sensitive information through the exploitation of specific SPL commands. This risk could arise when another vulnerability, such as a Risky Commands Bypass, is present, enabling potential attackers to access confidential data inadvertently exposed through the affected versions.

References