Gabriel Nitu, Splunk

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

Improper Access Control through the REST API in Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

Information Exposure through REST API Endpoints in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway