ZeroHour

CVE-2024-22164

CVSS 3.1
4.3 medium
EPSS
<1%p38
Published
()
Modified
Description

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.

Vendors
splunk
Products
enterprise security
Weakness
CWE-400, CWE-770
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

In the news

No ingested article mentions this CVE yet.