CVE-2024-53246: Sensitive Information Disclosure through SPL commands
5.3
CVSS
Description
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.
Classification
CVE ID: CVE-2024-53246
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
Affected Products
Vendor: Splunk
Product: Splunk Enterprise
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)