Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23652 State: PUBLISHED Published: 2024-01-31T21:57:42.774Z Last Updated: 2025-06-17T21:29:21.838Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: moby Products: buildkit Problem Types: CWE-22 Description: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or
The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8 - https://github.com/moby/buildkit/pull/4603 - https://github.com/moby/buildkit/releases/tag/v0.12.5
CVE ID: CVE-2024-23653 State: PUBLISHED Published: 2024-01-31T22:03:56.667Z Last Updated: 2024-08-23T18:16:30.503Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: moby Products: buildkit Problem Types: CWE-863 Description: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlemen
er with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g - https://github.com/moby/buildkit/pull/4602 - https://github.com/moby/buildkit/releases/tag/v0.12.5
CVE ID: CVE-2024-23654 State: PUBLISHED Published: 2024-02-21T20:28:12.939Z Last Updated: 2025-04-22T16:23:20.217Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: discourse Products: discourse-ai Problem Types: CWE-918 Description: discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit 94ba0dadc2cf38e8f81c3936974c167219878edd contain a patch. As a workaround, one may disable the discourse-ai plugin. Additional Analyst Notes: - CISA ADP Vulnrichmen
tain a patch. As a workaround, one may disable the discourse-ai plugin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/discourse/discourse-ai/security/advisories/GHSA-32cj-rm2q-22cc - https://github.com/discourse/discourse-ai/commit/94ba0dadc2cf38e8f81c3936974c167219878edd
CVE ID: CVE-2024-23655 State: PUBLISHED Published: 2024-01-25T19:38:18.916Z Last Updated: 2024-11-13T15:38:45.987Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: tutao Products: tutanota Problem Types: CWE-20 Description: Tuta is an encrypted email service. Starting in version 3.118.12 and prior to version 3.119.10, an attacker is able to send a manipulated email so that the user can no longer use the app to get access to received emails. By sending a manipulated email, an attacker could put the app into an unusable state. In this case, a user can no longer access received e-mails. Since the vulnerability affects not only the app, but also the web application
er can no longer access received e-mails. Since the vulnerability affects not only the app, but also the web application, a user in this case has no way to access received emails. This issue was tested with iOS and the web app, but it is possible all clients are affected. Version 3.119.10 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tutao/tutanota/security/advisories/GHSA-5h47-g927-629g - https://github.com/tutao/tutanota/releases/tag/tutanota-release-3.119.10
CVE ID: CVE-2024-23656 State: PUBLISHED Published: 2024-01-25T19:45:41.237Z Last Updated: 2025-06-03T18:20:38.271Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: dexidp Products: dex Problem Types: CWE-326, CWE-757 Description: Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1. `cmd/dex/serve.go` line 425 seemingly sets TLS 1.2 as minimum version, but the whole `tlsConfig` is ignored after `TLS cert reloader` was introduced in v2.37.0. Configured cipher suites are not respected either. This issue is fixed in Dex 2.38.0. Additional Analyst Notes: - CVE Program C
red cipher suites are not respected either. This issue is fixed in Dex 2.38.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dexidp/dex/security/advisories/GHSA-gr79-9v6v-gc9r - https://github.com/dexidp/dex/issues/2848 - https://github.com/dexidp/dex/pull/2964 - https://github.com/dexidp/dex/commit/5bbdb4420254ba73b9c4df4775fe7bdacf233b17 - https://github.com/dexidp/dex/blob/70d7a2c7c1bb2646b1a540e49616cbc39622fb83/cmd/dex/serve.go#L425
CVE ID: CVE-2024-23657 State: PUBLISHED Published: 2024-08-05T20:27:38.472Z Last Updated: 2024-08-08T13:36:34.991Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: nuxt Products: nuxt Problem Types: CWE-22, CWE-24 Description: Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Nuxt Devtools is missing authentication on the `getTextAssetContent` RPC function which is vulnerable to path traversal. Combined with a lack of Origin checks on the WebSocket handler, an attacker is able to interact with a locally running devtools instance and exfiltrate data abusing this vulnerability. In certain configurations an at
with a locally running devtools instance and exfiltrate data abusing this vulnerability. In certain configurations an attacker could leak the devtools authentication token and then abuse other RPC functions to achieve RCE. The `getTextAssetContent` function does not check for path traversals, this could allow an attacker to read arbitrary files over the RPC WebSocket. The WebSocket server does not check the origin of the request leading to cross-site-websocket-hijacking. This may be intentional to allow certain configurations to work correctly. Nuxt Devtools authentication tokens are placed within the home directory of the current user. The malicious webpage can connect to the Devtools WebSo
tokens are placed within the home directory of the current user. The malicious webpage can connect to the Devtools WebSocket, perform a directory traversal brute force to find the authentication token, then use the *authenticated* `writeStaticAssets` function to create a new Component, Nitro Handler or `app.vue` file which will run automatically as the file is changed. This vulnerability has been addressed in release version 1.3.9. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nuxt/nuxt/security/advisories/GHSA-rcvg-rgf7-pppv - https://github.com/nuxt/devtools/blob/c
rences: - https://github.com/nuxt/nuxt/security/advisories/GHSA-rcvg-rgf7-pppv - https://github.com/nuxt/devtools/blob/c4f2b68281203fc3f61ffc97d9c6623fbfde46bb/packages/devtools/src/dev-auth.ts#L14 - https://github.com/nuxt/devtools/blob/c4f2b68281203fc3f61ffc97d9c6623fbfde46bb/packages/devtools/src/server-rpc/assets.ts#L88C48-L88C48 - https://github.com/nuxt/devtools/blob/c4f2b68281203fc3f61ffc97d9c6623fbfde46bb/packages/devtools/src/server-rpc/assets.ts#L96C11-L96C28 - https://github.com/nuxt/devtools/blob/c4f2b68281203fc3f61ffc97d9c6623fbfde46bb/packages/devtools/src/server-rpc/index.ts#L109 - https://portswigger.net/web-security/websockets/cross-site-websocket-hijacking
CVE ID: CVE-2024-23658 State: PUBLISHED Published: 2024-04-08T02:21:17.943Z Last Updated: 2024-10-27T13:30:07.593Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313
CVE ID: CVE-2024-23659 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-02T15:03:09.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is related to javascript/bigup.js and javascript/bigup.utils.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.spip.net/Mise-a-jour-de-maintenance-et-securite-sortie-de-SPIP-4-2-8-SPIP-4-1-14.html?lang=fr - https://git.spip.net/spip/bigup/commit/ada821c076d67d1147a195178223d0b4a6d8cecc - https://git.spip.net/spip/bigup/commit/0757f015717cb72b84dba0e9a375ec71caddf1c2
CVE ID: CVE-2024-23660 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:59.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and consequently generates mnemonic words for which the device time is the only entropy source, leading to economic losses, as exploited in the wild in July 2023. An attacker can systematically generate mnemonics for each timestamp within an applicable timeframe, and link them to specific wallet addresses in order to steal funds from those wallets. Additional Analyst Notes: - CVE Progra
ink them to specific wallet addresses in order to steal funds from those wallets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://milksad.info/posts/research-update-5/ - https://secbit.io/blog/en/2024/01/19/trust-wallets-fomo3d-summer-vuln/
CVE ID: CVE-2024-23662 State: PUBLISHED Published: 2024-04-09T14:24:18.538Z Last Updated: 2024-08-22T19:58:33.041Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiOS Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-224
CVE ID: CVE-2024-23663 State: PUBLISHED Published: 2024-07-09T15:33:31.512Z Last Updated: 2024-08-01T23:06:25.354Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiExtender Problem Types: CWE-284 Description: An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 and 7.4.0 - 7.4.2 allows an attacker to create users with elevated privileges via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-459
CVE ID: CVE-2024-23664 State: PUBLISHED Published: 2024-06-03T09:50:26.151Z Last Updated: 2024-08-01T23:06:25.363Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiAuthenticator Problem Types: CWE-601 Description: A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow an attacker to to redirect users to an arbitrary website via a crafted URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-465
CVE ID: CVE-2024-23665 State: PUBLISHED Published: 2024-06-03T09:50:33.614Z Last Updated: 2024-08-01T23:06:25.362Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-285 Description: Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-474
CVE ID: CVE-2024-23666 State: PUBLISHED Published: 2024-11-12T18:53:43.202Z Last Updated: 2024-11-13T18:46:20.449Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-602 Description: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 t
0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-396
CVE ID: CVE-2024-23667 State: PUBLISHED Published: 2024-06-03T09:48:30.708Z Last Updated: 2024-08-01T23:06:25.346Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiWebManager Problem Types: CWE-285 Description: An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-222
CVE ID: CVE-2024-23668 State: PUBLISHED Published: 2024-06-03T09:48:24.625Z Last Updated: 2024-08-01T23:06:25.289Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiWebManager Problem Types: CWE-20 Description: An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-222
CVE ID: CVE-2024-23669 State: PUBLISHED Published: 2024-06-05T07:45:35.018Z Last Updated: 2024-08-01T23:06:25.272Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiWebManager Problem Types: CWE-20 Description: An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-222
CVE ID: CVE-2024-23670 State: PUBLISHED Published: 2024-06-03T09:48:12.424Z Last Updated: 2024-08-01T23:06:25.445Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiWebManager Problem Types: CWE-285 Description: An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-222
CVE ID: CVE-2024-23671 State: PUBLISHED Published: 2024-04-09T14:24:20.543Z Last Updated: 2024-08-22T19:57:13.149Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-22 Description: A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.3 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-454
CVE ID: CVE-2024-23672 State: PUBLISHED Published: 2024-03-13T15:48:42.610Z Last Updated: 2025-10-29T11:57:10.244Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-459 Description: Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue
also be affected. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f
CVE ID: CVE-2024-23673 State: PUBLISHED Published: 2024-02-06T10:04:21.294Z Last Updated: 2025-05-09T16:27:44.139Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache Sling Servlets Resolver Problem Types: CWE-22 Description: Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet
system. If the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script. Users are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/5zzx8ztwc6tmbwlw80m2pbrp3913l2kl - http://www.openwall.com/lists/oss-security/2024/02/06/1
CVE ID: CVE-2024-23674 State: PUBLISHED Published: 2024-02-15T00:00:00 Last Updated: 2024-11-06T17:24:04.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from the card, aka the "sPACE (Spoofing Password Authenticated Connection Establishment)" issue. This occurs because of a combination of factors, such as insecure PIN entry (for basic readers) and eid:// deeplinking. The victim must be usi
a combination of factors, such as insecure PIN entry (for basic readers) and eid:// deeplinking. The victim must be using a modified eID kernel, which may occur if the victim is tricked into installing a fake version of an official app. NOTE: the BSI position is "ensuring a secure operational environment at the client side is an obligation of the ID card owner." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.personalausweisportal.de/ - https://www.ausweisapp.bund.de/ - https://ctrlalt.medium.com/space-attack-spoofing-eids-password-authenticated-connection-establishment-11561e5657b1 - https://www.dropbox.com/scl/fi/2powlii0dnmr7p7v5ijhc/
ids-password-authenticated-connection-establishment-11561e5657b1 - https://www.dropbox.com/scl/fi/2powlii0dnmr7p7v5ijhc/2024_German_eID_02_Spoofing_PACE_final.pdf?rlkey=nx0ffmmbq3hffgxsuqwf0f45z&dl=0
CVE ID: CVE-2024-23675 State: PUBLISHED Published: 2024-01-22T20:37:23.117Z Last Updated: 2025-02-28T11:03:59.164Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Splunk Products: Splunk Enterprise, Splunk Cloud Problem Types: CWE-284 Description: In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0105 - https://resea
m Container: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0105 - https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/
CVE ID: CVE-2024-23676 State: PUBLISHED Published: 2024-01-22T20:37:42.546Z Last Updated: 2025-06-17T14:24:05.909Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Splunk Products: Splunk Enterprise, Splunk Cloud Problem Types: CWE-20 Description: In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0106 - https://research.splunk.com
CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0106 - https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/
CVE ID: CVE-2024-23677 State: PUBLISHED Published: 2024-01-22T20:37:41.993Z Last Updated: 2025-02-28T11:03:55.344Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Splunk Products: Splunk Enterprise, Splunk Cloud Problem Types: CWE-532 Description: In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.splunk.com/advisories/SVD-2024-0107