Gabriel Nitu, Splunk

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

Improper Access Control through the REST API in Splunk Enterprise

Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Improper Privilege Management through Agent Run History in Splunk AI Toolkit

Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise