Ai Toolkit vulnerabilities
7 known vulnerabilities in Ai Toolkit from Splunk. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Splunk AI Toolkit: Incorrect Permission Assignment for Critical Resource
In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access to all releva
- 8.1 High severity
Splunk AI Toolkit: Authorization Bypass Through User-Controlled Key
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not pr
- 7.5 High severity
Splunk AI Toolkit: Improper Privilege Management
In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk
- 8.8 High severity
Splunk AI Toolkit: Deserialization of Untrusted Data
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a mod
- 8.3 High severity
Splunk AI Toolkit: Missing Authorization
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfer
- 8.3 High severity
Splunk AI Toolkit: Incorrect Authorization
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users
- 9.1 Critical severity
Splunk AI Toolkit: Improper Neutralization of Special Elements used in an OS Command
In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool