Security Advisory

CVE-2024-23676

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-22 20:37:42

Last updated 2025-06-17 14:24:05

Assigner Splunk

State PUBLISHED

Description

In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.

← Browse all CVEs View on cve.org ↗