CVE-2023-32710 — MEDIUM (4.8)

Q: How severe is CVE-2023-32710?

CVE-2023-32710 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-32710?

Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk, Splunk Splunk Cloud Platform.

Vulnerability Description

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID (SID) of a search job that has recently run.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Splunk	Splunk	>= 8.1.0, < 8.1.14
Splunk	Splunk Cloud Platform	< 9.0.2303.100

Related Weaknesses (CWE)

CWE-200

References

https://advisory.splunk.com/advisories/SVD-2023-0609Vendor Advisory
https://advisory.splunk.com/advisories/SVD-2023-0609Vendor Advisory

FAQ

What is CVE-2023-32710?

CVE-2023-32710 is a vulnerability with a CVSS score of 4.8 (MEDIUM). In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a searc...

How severe is CVE-2023-32710?

CVE-2023-32710 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-32710?

Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk, Splunk Splunk Cloud Platform.