How severe is CVE-2024-45731?

This vulnerability has a severity rating of HIGH with a CVSS score of 8 out of 10.

What type of vulnerability is CVE-2024-45731?

This is classified as CWE-23, which is a common weakness in software security.

CVE-2024-45731 - HIGH Severity | CVSS 8

Vulnerability Description

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root directory, which has a default location in the Windows System32 folder, when Splunk Enterprise for Windows is installed on a separate drive.

Related Vulnerabilities

CVE-2018-10615

HIGH

CVSS:8.1(High)

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.

CWE-232018

CVE-2019-3943

HIGH

CVSS:8.1(High)

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox...

CWE-232019

CVE-2021-41242

HIGH

CVSS:8.1(High)

OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a pa...

CWE-232021

CVE-2022-21177

HIGH

CVSS:8.1(High)

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4....

CWE-232022

CVE-2022-41335

HIGH

CVSS:8.1(High)

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and...

CWE-232022

CVE-2023-1045

HIGH

CVSS:8.1(High)

A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the...

CWE-232023