CVE-2024-45737

Published: Oct 14, 2024Modified: Jun 17, 2026

3.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Exploitability: 2.1 / Impact: 1.4

Source: NVD

Description

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF).

Affected (5)

Products: Splunk: Splunk, Splunk Cloud Platform

Splunk

2 products

Splunk

Splunk Cloud Platform

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	From 9.1.0 to 9.1.6
Splunk Splunk	From 9.2.0 to 9.2.3
Splunk Splunk	Version 9.3.0
Splunk Splunk Cloud Platform	From 9.1.2312 to 9.1.2312.204
Splunk Splunk Cloud Platform	From 9.2.2403.102 to 9.2.2403.108

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://advisory.splunk.com/advisories/SVD-2024-1007

Source: prodsec@splunk.com

Vendor Advisory

https://research.splunk.com/application/34bac267-a89b-4bd7-a072-a48eef1f15b8/

Source: prodsec@splunk.com

Vendor Advisory

Timeline

No history available yet.