- 336/2024
- High
Splunk has released security updates to fix multiple vulnerabilities affecting several Splunk products.
The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, or execute arbitrary code and gain access to the affected systems.
Sample of the addressed vulnerabilities:
Splunk Secure Gateway App Remote Code Execution Vulnerability (CVE-2024- 53247):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Consequences: Gain Access
The affected products:
- Splunk Secure Gateway.
- Splunk Enterprise.
- Splunk Cloud Platform.
Vulnerabilities
- CVE-2024-53243
- CVE-2024-53244
- CVE-2024-53245
- CVE-2024-53246
- CVE-2024-53247
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.