VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2024· Updated Feb 28, 2025

Sensitive Information Disclosure through SPL commands

CVE-2024-53246

Description

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Splunk/Splunk Cloud Platformllm-fuzzy2 versions
    >=9.1.2312.200, <9.1.2312.206 || >=9.2.2403.100, <9.2.2403.111 || >=9.2.2406.100, <9.2.2406.106 || >=9.3.2408.100, <9.3.2408.101+ 1 more
    • (no CPE)range: >=9.1.2312.200, <9.1.2312.206 || >=9.2.2403.100, <9.2.2403.111 || >=9.2.2406.100, <9.2.2406.106 || >=9.3.2408.100, <9.3.2408.101
    • (no CPE)range: 9.3.2408
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    >=9.1.0, <9.1.7 || >=9.2.0, <9.2.4 || >=9.3.0, <9.3.2+ 1 more
    • (no CPE)range: >=9.1.0, <9.1.7 || >=9.2.0, <9.2.4 || >=9.3.0, <9.3.2
    • (no CPE)range: 9.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.