Vulnerability Description
In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed by exporting the dashboard as a PDF, using the local image path in the img tag in the source extensible markup language (XML) code for the Splunk classic dashboard.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk | >= 9.1.0, < 9.1.6 |
Related Weaknesses (CWE)
References
- https://advisory.splunk.com/advisories/SVD-2024-1004Vendor Advisory
- https://research.splunk.com/application/7464e2dc-98a5-4af9-87a1-fa6d5a256fa6/Vendor Advisory
FAQ
What is CVE-2024-45734?
CVE-2024-45734 is a vulnerability with a CVSS score of 4.3 (MEDIUM). In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by usin...
How severe is CVE-2024-45734?
CVE-2024-45734 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-45734?
Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk.