Medium severity · published Dec 10, 2024
CVE-2024-53243
Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see alert search query responses using Splunk Secure Gateway App Key Value Store (KVstore) collections endpoints due to improper access control.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Splunk Enterprise · Splunk
9.3 before 9.3.2; 9.2 before 9.2.4; 9.1 before 9.1.7 · source: vendor
SS
Splunk Secure Gateway · Splunk
3.8 before 3.8.5; 3.7 before 3.7.18; 3.4 before 3.4.262 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-53243
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-53243
advisory.splunk.com
https://advisory.splunk.com/advisories/SVD-2024-1201
More from Splunk Enterprise
9.8
CVE-2026-20253
Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
9.9
CVE-2026-76302
Security Hardening in Splunk Enterprise - October 2026
9.9
CVE-2026-76299
Security Hardening in Splunk Enterprise - October 2026
9.8
CVE-2026-76301
Security Hardening in Splunk Enterprise - October 2026
9.8
CVE-2026-76285
Improper Adherence to Coding Standards in Splunk Enterprise