CNNVD-202511-1399 Information
CNNVD ID
CNNVD-202511-1399
Related CVE
- CNNVD Published: 2025-11-12
Description (Chinese)
Splunk Cloud Platform和Splunk Enterprise都是美国Splunk公司的产品。Splunk Cloud Platform是一个强大的数据收集、处理和分析服务。Splunk Enterprise是一套数据收集分析软件。 Splunk Cloud Platform和Splunk Enterprise存在信息泄露漏洞，该漏洞源于低权限用户可通过字符编码绕过SPL保护措施执行高风险命令。以下版本受到影响：Splunk Enterprise 10.0.1之前版本、9.4.5之前版本、9.3.7之前版本、9.2.9之前版本和Splunk Cloud Platform 9.3.2411.116之前版本、9.3.2408.124之前版本、10.0.2503.5之前版本、10.1.2507.1之前版本。
Description (English)
Splunk Cloud Platform and Splunk Enterprise are products of the United States company Splunk. Splung Cloud Platform is a powerful data collection, processing and analysis service. Splung Enterprise is a data collection and analysis software. Splung Cloud Platform and Splunk Enterprise have a leaking loophole, which results from the fact that low-authorized users can circumvent the SPL protections to execute high-risk orders through character encoding. The following versions were affected: Pre-Splunk Enterprise 10.0.1, Pre-Splunk Enterprise 10.4.5, Pre-Six.7, Pre-Splung Cloud Platform 9.3.241.116, Pre-Splunk Cloud Platform.124, Pre-Stencing 10.2503.5, Pre-Stencing 10.1.25007.1.
Hazard Level
Critical
Vulnerability Type
信息泄露
Affected Vendor
Splunk
Published
2025-11-12
Last Modified
2026-02-24
References
https://advisory.splunk.com/advisories/SVD-2025-1102
Patch
https://advisory.splunk.com/advisories/SVD-2025-1102
Share on: