CVE-2024-22165

CVSS V2 None CVSS V3 None

Description

In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an authenticated session and access to create an Investigation. It only affects the availability of the Investigations manager, but without the manager, the Investigations functionality becomes unusable for most users.

Overview

CVE ID
CVE-2024-22165

Assigner
Splunk

Vulnerability Status
PUBLISHED

Published Version
2024-01-09T17:01:04.884Z

Last Modified Date
2024-06-04T17:52:31.592Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://advisory.splunk.com/advisories/SVD-2024-0102
https://research.splunk.com/application/7f6a07bd-82ef-46b8-8eba-802278abd00e/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-22165
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22165

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 08:58:50				Added to TrackCVE