CNNVD-202507-754 Information
CNNVD ID
CNNVD-202507-754
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
Splunk Cloud Platform和Splunk Enterprise都是美国Splunk公司的产品。Splunk Cloud Platform是一个强大的数据收集、处理和分析服务。Splunk Enterprise是一套数据收集分析软件。 Splunk Enterprise和Splunk Cloud Platform存在访问控制错误漏洞，该漏洞源于低权限用户可创建或覆盖系统源类型配置。以下产品及版本受到影响:Splunk Enterprise 9.4.2、9.3.5、9.2.7和9.1.10之前版本和Splunk Cloud Platform 9.3.2411.104、9.3.2408.113和9.2.2406.119之前版本。
Description (English)
Splunk Cloud Platform and Splunk Enterprise are products of the United States company Splunk. Splung Cloud Platform is a powerful data collection, processing and analysis service. Splung Enterprise is a data collection and analysis software. There is a bug access control loophole in Splung Enterprise and Splunk Cloud Platform, which results from low-Access users who can create or overwrite system source type configurations. The following products and versions were affected: Splung Enterprise 9.4.2, 9.3.5, 9.2.7 and 9.1.10 pre-versions and Splung Cloud Platform 9.3.2411.104, 9.3.2408.113 and 9.2.2406.119 pre-versions.
Hazard Level
High
Vulnerability Type
访问控制错误
Affected Vendor
视博网讯
Published
2025-07-07
Last Modified
2026-02-24
References
https://advisory.splunk.com/advisories/SVD-2025-0707
Patch
https://advisory.splunk.com/advisories/SVD-2025-0707
Share on: