CNNVD-202507-760 Information

CNNVD ID

CNNVD-202507-760

CVE-2025-20325

  • CNNVD Published: 2025-07-07

Description (Chinese)

Splunk Cloud Platform和Splunk Enterprise都是美国Splunk公司的产品。Splunk Cloud Platform是一个强大的数据收集、处理和分析服务。Splunk Enterprise是一套数据收集分析软件。 Splunk Enterprise 9.4.3、9.3.5、9.2.7和9.1.10之前版本和Splunk Cloud Platform 9.3.2411.103、9.3.2408.113和9.2.2406.119之前版本存在信息泄露漏洞,该漏洞源于可能暴露搜索头集群密钥。

Description (English)

Splunk Cloud Platform and Splunk Enterprise are products of the United States company Splunk. Splung Cloud Platform is a powerful data collection, processing and analysis service. Splung Enterprise is a data collection and analysis software. Pre-Splunk Enterprise 9.3.3, 9.3.5, 9.2.7 and 9.1.10 and pre-Splunk Cloud Platform 9.3.2411.103, 9.3.2408.113 and 9.2.2406.119 have information leaks that stem from potential exposure of head cluster keys.

Hazard Level

Critical

Vulnerability Type

信息泄露

Affected Vendor

视博网讯

Published

2025-07-07

Last Modified

2026-02-24

References

https://advisory.splunk.com/advisories/SVD-2025-0709

Patch

https://advisory.splunk.com/advisories/SVD-2025-0709

Share on: