VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026

CVE-2023-22940

CVE-2023-22940

Description

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not designated as safeguarded commands. The commands could potentially allow for the exposing of data to a summary index that unprivileged users could access. The vulnerability requires a higher privileged user to initiate a request within their browser, and only affects instances with Splunk Web enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=8.1.0,<8.1.13
  • Splunk/Splunk Cloud Platform2 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: <9.0.2209.3
    • (no CPE)range: -
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <8.1.13, <8.2.10, <9.0.4+ 1 more
    • (no CPE)range: <8.1.13, <8.2.10, <9.0.4
    • (no CPE)range: 8.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.