Skip to content
Threat Feed
Subscribe

Product

Splunk Enterprise for Windows (Versions < 9.2.3)

1 brief RSS
high advisory

Splunk RCE Through Arbitrary File Write to Windows System Root

A critical vulnerability (CVE-2024-45731, CVE-2024-45733) in Splunk Enterprise for Windows versions below 9.3.0, 9.2.3, and 9.1.6 allows low-privileged users to perform arbitrary file writes to the Windows system root directory (C:\Windows\System32) when Splunk is installed on a separate drive, enabling remote code execution through insecure session storage configuration.

Splunk Enterprise for Windows +2 application-vulnerability rce file-write privilege-escalation splunk windows
2r 3t 2c