CVE-2024-23678

CVSS V2 None CVSS V3 None
Description
In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition on the machine. This vulnerability only affects Splunk Enterprise for Windows.
Overview
  • CVE ID
  • CVE-2024-23678
  • Assigner
  • Splunk
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-01-22T20:37:43.095Z
  • Last Modified Date
  • 2024-04-10T00:53:01.229Z
History
Created Old Value New Value Data Type Notes
2024-06-26 06:49:28 Added to TrackCVE