Security Advisory

CVE-2024-53247

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-10 18:00:24
Last updated 2025-02-28 11:03:41
Assigner Splunk
CVSS score 8.8
State PUBLISHED

Description

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remote Code Execution (RCE).