133 lines
5.2 KiB
JSON
133 lines
5.2 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.1",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2023-22942",
|
||
"assignerOrgId": "42b59230-ec95-491e-8425-5a5befa1a469",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "Splunk",
|
||
"dateReserved": "2023-01-10T21:39:55.584Z",
|
||
"datePublished": "2023-02-14T17:22:39.330Z",
|
||
"dateUpdated": "2025-02-28T11:03:45.664Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"affected": [
|
||
{
|
||
"product": "Splunk Enterprise",
|
||
"vendor": "Splunk",
|
||
"versions": [
|
||
{
|
||
"version": "8.1",
|
||
"status": "affected",
|
||
"versionType": "custom",
|
||
"lessThan": "8.1.13"
|
||
},
|
||
{
|
||
"version": "8.2",
|
||
"status": "affected",
|
||
"versionType": "custom",
|
||
"lessThan": "8.2.10"
|
||
},
|
||
{
|
||
"version": "9.0",
|
||
"status": "affected",
|
||
"versionType": "custom",
|
||
"lessThan": "9.0.4"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"supportingMedia": [
|
||
{
|
||
"base64": false,
|
||
"type": "text/html",
|
||
"value": "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG) app in the ‘kvstore_client’ REST endpoint lets a potential attacker update SSG KV store collections using an HTTP GET request."
|
||
}
|
||
],
|
||
"value": "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG) app in the ‘kvstore_client’ REST endpoint lets a potential attacker update SSG KV store collections using an HTTP GET request."
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://advisory.splunk.com/advisories/SVD-2023-0212"
|
||
},
|
||
{
|
||
"url": "https://research.splunk.com/application/4742d5f7-ce00-45ce-9c79-5e98b43b4410/"
|
||
}
|
||
],
|
||
"title": "Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise",
|
||
"datePublic": "2023-02-14T00:00:00.000Z",
|
||
"metrics": [
|
||
{
|
||
"cvssV3_1": {
|
||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
|
||
"version": "3.1",
|
||
"baseScore": 5.4,
|
||
"baseSeverity": "MEDIUM"
|
||
},
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"type": "cwe",
|
||
"description": "The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.",
|
||
"cweId": "CWE-352"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"source": {
|
||
"advisory": "SVD-2023-0212"
|
||
},
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Anton (therceman)"
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "42b59230-ec95-491e-8425-5a5befa1a469",
|
||
"shortName": "Splunk",
|
||
"dateUpdated": "2025-02-28T11:03:45.664Z"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2024-08-02T10:20:31.432Z"
|
||
},
|
||
"title": "CVE Program Container",
|
||
"references": [
|
||
{
|
||
"url": "https://advisory.splunk.com/advisories/SVD-2023-0212",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://research.splunk.com/application/4742d5f7-ce00-45ce-9c79-5e98b43b4410/",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
} |