CVE-2024-23675

Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

State: Published
Severity: 6.5 Medium
Published: Jan 22, 2024
Updated: Feb 28, 2025
Reserved: Jan 19, 2024

Description

In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	Splunk

Weaknesses

CWE-284 The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Affected Products

Product	Versions
Splunk EnterpriseSplunk	9.0 to before 9.0.8Affected 9.1 to before 9.1.3Affected
Splunk CloudSplunk	- to before 9.1.2312.100Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.