| Package | Affected versions | Patched versions |
|---|---|---|
| cloud | < 9.1.2308.200 | 9.1.2308.200 |
| splunk | ≥ 9.0.0, < 9.0.8≥ 9.1.0, < 9.1.3 | 9.0.89.1.3 |
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free