CVE-2024-53247 — Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

CVE-2024-53247

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app PUBLISHED

Description (CNA)

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remote Code Execution (RCE).

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 9.3 before 9.3.2; affected 9.2 before 9.2.4; affected 9.1 before 9.1.7
Splunk / Splunk Secure Gateway	affected 3.7 before 3.7.13; affected 3.4 before 3.4.261

CWE

CWE-502

References

https://advisory.splunk.com/advisories/SVD-2024-1205

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.