CVE-2023-22942

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 8.1.13 Splunk Enterprise versions prior to 8.2.10 Splunk Enterprise versions prior to 9.0.4

Description A cross-site request forgery in the Splunk Secure Gateway (SSG) app in the 'kvstore client' REST endpoint allows a potential attacker to update SSG KV store collections using an HTTP GET request. The vulnerability affects instances with SSG and Splunk Web enabled.

Recommendations For versions prior to 8.1.13, update to version 8.1.13 or later. For versions prior to 8.2.10, update to version 8.2.10 or later. For versions prior to 9.0.4, update to version 9.0.4 or later.