جزئیات آسیب‌پذیری
CVE-2026-20296
SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
شرح رسمی (انگلیسی)
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the `list_deployment_server` capability into running arbitrary Search Processing Language (SPL) searches on their behalf as `splunk-system-user`, allowing for access to stored credentials and indexed data.<br><br>The vulnerability is possible because Deployment Server endpoints in Splunk Web do not validate Cross-Site Request Forgery (CSRF) tokens on GET requests, and caller-supplied input is not correctly neutralized before it is placed into an SPL search.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.3بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Splunk | Splunk Cloud Platform | 10.1.2507 ≤ v < 10.1.2507.24 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Cloud Platform | 10.2.2510 ≤ v < 10.2.2510.18 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Cloud Platform | 10.3.2512 ≤ v < 10.3.2512.16 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Cloud Platform | 10.4.2604 ≤ v < 10.4.2604.7 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Cloud Platform | 10.5.2605 ≤ v < 10.5.2605.0 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Enterprise | 10.0 ≤ v < 10.0.8 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Enterprise | 10.2 ≤ v < 10.2.5 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Enterprise | 10.4 ≤ v < 10.4.1 | CVEProject cvelistV5 (CNA) |
| Splunk | Splunk Enterprise | 9.4 ≤ v < 9.4.13 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۴/۲۴
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۵
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-352The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.