vulnerability
Splunk: CVE-2024-23676: Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:M/Au:S/C:P/I:P/A:N) | Jan 22, 2024 | Apr 7, 2025 | Oct 31, 2025 |
Severity
5
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:N)
Published
Jan 22, 2024
Added
Apr 7, 2025
Modified
Oct 31, 2025
Description
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit. SeeSplunk Enterprise Metricsfor information on Metrics.
Solution
splunk-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.