CyberRota Analysis
AI-GeneratedIn Splunk AI Toolkit versions prior to 6.0.1, users with the "power" role can exploit a vulnerability to alter scheduled searches, executing arbitrary Search Processing Language (SPL) with the permissions of the search owner. This could lead to unauthorized access to sensitive data and compromise system integrity. Organizations using affected versions of the Splunk AI Toolkit should prioritize patching to mitigate potential data breaches and maintain security.
Original NVD Description
In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access to all relevant data and affect system integrity. The vulnerability is possible because Splunk AI Toolkit gives the "power" Splunk role permission to modify scheduled searches that run using the permissions of the search owner.
Related CVEs
Other vulnerabilities affecting the same vendor(s)