| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | ≥ 9.1.0, < 9.1.7≥ 9.2.0, < 9.2.4 | 9.1.79.2.4 |
| splunk cloud platform | ≥ 9.1.2312, < 9.1.2312.206 | 9.1.2312.206 |
In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read access to dashboards, could see the dashboard name and the dashboard XML by cloning the dashboard.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free