CVE-2023-32709
Summary
| CVE | CVE-2023-32709 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-01 17:15:00 UTC |
| Updated | 2023-11-07 04:14:00 UTC |
| Description | In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the hashed version of the initial user name and password for the Splunk instance by using the ‘rest’ SPL command against the ‘conf-user-seed’ REST endpoint. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Splunk | Splunk | All | All | All | All |
| Application | Splunk | Splunk Cloud Platform | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SVD-2023-0604 | Splunk Vulnerability Disclosure | MISC | advisory.splunk.com | |
| Page Not Found - Splunk Security Content | MISC | research.splunk.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 378741 Splunk Enterprise Information Disclosure Vulnerability (SVD-2023-0604)