Skip to content
VulniPulse
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2024-53243

CVE-2024-53243: 1 tracked advisory record across Splunk. Compare vendor sources.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

Vendor advisory comparison

Splunk

1 advisory
  • Advisory severityMedium4.3

    Medium [CVE-2024-53243] In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure…

    CVE-2024-53243Source published Source updated

    In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see alert search query responses using Splunk Secure Gateway App Key Value Store (KVstore) collections endpoints due to improper access control.

    Related products — impact not confirmed
    • Splunk Enterprise
    • Splunk Cloud Platform
    • Splunk Secure Gateway
    Source-reported affected versions
    • 9.3.2
    • 9.2.4
    • 9.1.7
    • 3.2.462

    2 more entries in the full advisory.

    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    No mitigation guidance extracted; consult the source.

Android app · Google Play

Monitor future Splunk CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery