CVE-2023-32706 — Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

CVE-2023-32706

Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication PUBLISHED

Description (CNA)

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of service in the Splunk daemon.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 8.1 before 8.1.14; affected 8.2 before 8.2.11; affected 9.0 before 9.0.5
Splunk / Splunk Cloud Platform	affected 9.0.2303 and below before 9.0.2303.100

CWE

CWE-611

References

https://advisory.splunk.com/advisories/SVD-2023-0601

ADP enrichment

CVE

No English description supplied.

https://advisory.splunk.com/advisories/SVD-2023-0601

CISA-ADP

No English description supplied.

No references supplied.