Описание
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web.
Ссылки
- Vendor Advisory
- MitigationVendor Advisory
- Vendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
2.6 Low
CVSS3
3.5 Low
CVSS3
Дефекты
Связанные уязвимости
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web.
EPSS
2.6 Low
CVSS3
3.5 Low
CVSS3