CVE-2022-32154

概要

参考情報

• docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards · Mitigation
• docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates · Release Notes
• research.splunk.com/application/splunk_command_and_scripting_interpreter_delete_usage · Mitigation
• research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_commands · Mitigation
• research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_spl_mltk · Mitigation
• splunk.com/en_us/product-security/announcements/svd-2022-0604.html · Vendor Advisory

splunk のその他の脆弱性

• CVE-2026-76298高 8.8In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the Postgre…
• CVE-2026-76297中 5.4In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with t…
• CVE-2026-76296中 4.3In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could …
• CVE-2026-76295中 4.3In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.7…
• CVE-2026-76294中 4.3In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could …