CyberRota Analysis
AI-GeneratedIn Splunk AI Toolkit versions prior to 6.0.0, low-privileged users can exploit inadequate authorization checks in the REST API to start, stop, and configure containers, as well as access and modify sensitive connection and configuration data. This vulnerability poses a significant risk of unauthorized access and manipulation of system resources. Organizations utilizing affected versions of the Splunk AI Toolkit should prioritize immediate updates to mitigate potential security breaches.
Original NVD Description
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfer (REST) API. The missing authorization is possible because multiple REST API handlers in Splunk AI Toolkit do not enforce authorization checks. For more information see Troubleshoot the Splunk Machine Learning Toolkit (https://help.splunk.com/en/splunk-cloud-platform/apply-machine-learning/machine-learning-toolkit-user-guide/5.5.0/troubleshooting-mltk/troubleshoot-the-splunk-machine-learning-toolkit) in the Splunk documentation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)