CVE-2024-53247CWE-502

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

High · published December 10, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remote Code Execution (RCE).

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01077 · 64.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-12-10T18:00Z
EPSS history
Timeline
  • 10 DEC 18:00Z
    Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app
    cvelistv5