Описание
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.1.0 (включая) до 7.1.2 (исключая)
cpe:2.3:a:splunk:enterprise_security:*:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00151
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-400
CWE-770
CWE-400
Связанные уязвимости
CVSS3: 4.3
github
около 2 лет назад
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
EPSS
Процентиль: 36%
0.00151
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-400
CWE-770
CWE-400