Splunk 9.0.10 Enterprise Edition

CPE Details

Splunk 9.0.10 Enterprise Edition
splunk
splunk
9.0.10
2025-01-27
12h22 +00:00
2025-01-27
12h22 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:splunk:splunk:9.0.10:*:*:*:enterprise:*:*:*

Informations

Vendor

splunk

Product

splunk

Version

9.0.10

Software Edition

enterprise

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-36996 2024-07-01 16h30 +00:00 In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists on the instance by deciphering the error response that they would likely receive from the instance when they attempt to log in. This disclosure could then lead to additional brute-force password-guessing attacks. This vulnerability would require that the Splunk platform instance uses the Security Assertion Markup Language (SAML) authentication scheme.
5.3
Medium