CVE-2024-36991CWE-35
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
High · published July 1, 2024
What it is
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.13006 · 96.3th percentile
- Weakness
- CWE-35 · Path Traversal: '.../...//'
- Published
- 2024-07-01T16:31Z
EPSS history
Timeline