In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.
History

Tue, 15 Oct 2024 19:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-253

cve-icon MITRE

Status: PUBLISHED

Assigner: Splunk

Published: 2024-07-01T16:30:57.461Z

Updated: 2024-12-10T18:01:28.618Z

Reserved: 2024-05-30T16:36:20.999Z

Link: CVE-2024-36985

cve-icon Vulnrichment

Updated: 2024-08-02T03:43:50.397Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-01T17:15:06.703

Modified: 2024-11-21T09:22:58.640

Link: CVE-2024-36985

cve-icon Redhat

No data.