CVE-2024-22164
Assigner: Splunk
Published: 2024-01-09T17:01:07.832Z
State: PUBLISHED
affected: product: Splunk Enterprise Security (ES)
vendor: Splunk
versions: version: 7.3
status: affected
versionType: custom
lessThan: 7.3.0
version: 7.2
status: affected
versionType: custom
lessThan: 7.2.0
version: 7.1
status: affected
versionType: custom
lessThan: 7.1.2
descriptions: supportingMedia: base64: no
type: text/html
value: In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
value: In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
title: Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments
datePublic: 2024-01-09T00:00:00.000000
metrics: cvssV3_1: vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
version: 3.1
baseScore: 4.3
baseSeverity: MEDIUM
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: type: cvw
description: The software does not properly control the allocation and maintenance of a limited resource thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
cweId: CWE-400
source: advisory: SVD-2024-0101
credits: value: Vikram Ashtaputre, Splunk