{"id":"CVE-2024-23675","aliases":["EUVD-2024-21146","GHSA-h7m5-mp8f-v424"],"status":"published","title":"Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion","description":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00376,"percentile":0.31924,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-863"],"published":"2024-01-22T20:37:23Z","modified":"2026-06-17T07:13:21Z","products":[{"vendor":"splunk","product":"cloud"},{"vendor":"splunk","product":"splunk"},{"vendor":"splunk","product":"splunk cloud"},{"vendor":"splunk","product":"splunk enterprise"}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2024-0105","tags":["x_transferred","Vendor Advisory"]},{"url":"https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23675"},{"url":"https://github.com/advisories/GHSA-h7m5-mp8f-v424"}],"sources":{"cve":[{"id":"CVE-2024-23675","title":"Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion","description":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.","status":"published","published":"2024-01-22T20:37:23.117Z","modified":"2025-02-28T11:03:59.164Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:05.444281Z"}],"euvd":[{"id":"EUVD-2024-21146","description":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.","status":"published","published":"2024-01-22T20:37:23Z","modified":"2025-02-28T11:03:59Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:19.898689Z"}],"ghsa":[{"id":"GHSA-h7m5-mp8f-v424","title":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store)...","description":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.","status":"published","published":"2024-01-22T21:31:07Z","modified":"2024-01-29T18:31:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-284","CWE-863"],"updated_at":"2026-11-02T14:55:30.137349Z"}],"nvd":[{"id":"CVE-2024-23675","description":"In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections.","status":"published","published":"2024-01-22T21:15:10.263Z","modified":"2026-06-17T07:13:21.823Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-863"],"updated_at":"2026-11-02T14:09:32.147098Z"}]}}