[{"vendor":"splunk","product":"splunk_enterprise","defaultStatus":"unknown","cpes":["cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*"],"versions":[{"version":"9.2","lessThan":"9.2.3","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.6","versionType":"custom","status":"affected"}]},{"vendor":"splunk","product":"splunk_secure_gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:splunk:splunk_secure_gateway:*:*:*:*:*:*:*:*"],"versions":[{"version":"3.6","lessThan":"3.6.17","versionType":"custom","status":"affected"},{"version":"3.4","lessThan":"3.4.259","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-11-08T19:22:41.212370Z","id":"CVE-2024-45735","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Splunk","product":"Splunk Enterprise","versions":[{"version":"9.2","lessThan":"9.2.3","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.6","versionType":"custom","status":"affected"}]},{"vendor":"Splunk","product":"Splunk Secure Gateway","versions":[{"version":"3.6","lessThan":"3.6.17","versionType":"custom","status":"affected"},{"version":"3.4","lessThan":"3.4.259","versionType":"custom","status":"affected"}]}]

NIST AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.1.0 up to (excluding) 9.1.6
     *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.2.0 up to (excluding) 9.2.3
     *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions up to (excluding) 3.4.259
     *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 3.6.0 up to (excluding) 3.6.17

https://advisory.splunk.com/advisories/SVD-2024-1005 No Types Assigned

https://advisory.splunk.com/advisories/SVD-2024-1005 Vendor Advisory

https://research.splunk.com/application/0a3d6035-7bef-4dfa-b01e-84349edac3b4/ No Types Assigned

https://research.splunk.com/application/0a3d6035-7bef-4dfa-b01e-84349edac3b4/ Vendor Advisory

In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a low-privileged user that does not hold the "admin" or "power" Splunk roles can see App Key Value Store (KV Store) deployment configuration and public/private keys in the Splunk Secure Gateway App.

Splunk Inc. AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Splunk Inc. CWE-284

Splunk Inc. https://advisory.splunk.com/advisories/SVD-2024-1005 [No types assigned]

Splunk Inc. https://research.splunk.com/application/0a3d6035-7bef-4dfa-b01e-84349edac3b4/ [No types assigned]