CVE-2024-53247 Information

Description

In Splunk Enterprise versions below 9.3.2 9.2.4 and 9.1.7 and versions below 3.2.461 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remote Code Execution (RCE).

Reference

https://advisory.splunk.com/advisories/SVD-2024-1205