Author: Angelo Barbosa

CVE-2024-29946 | Splunk Enterprise up to 9.0.8/9.1.3/9.2.0 Dashboard Studio App input validation (SVD-2024-0302)

A vulnerability was found in Splunk Enterprise up to 9.0.8/9.1.3/9.2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component Dashboard Studio App. The manipulation leads to improper input validation. This vulnerability is handled as CVE-2024-29946. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2024-29945 | Splunk Enterprise up to 9.0.8/9.1.3/9.2.0 JsonWebToken Component log file (SVD-2024-0301)

A vulnerability was found in Splunk Enterprise up to 9.0.8/9.1.3/9.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component JsonWebToken Component. The manipulation leads to sensitive information in log files. This vulnerability is known as CVE-2024-29945. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More