Splunk Secure Gateway.

SPL Injection through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Missing Access Control through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Server-side request forgery (SSRF)

Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Server-side request forgery (SSRF)

SPL Injection through Splunk Web in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Hard-coded credentials

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Information Exposure through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Cloud Platform
• Insecure deserialization

Improper Input Validation in "label" column field in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Sensitive Information Disclosure in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

• Splunk Enterprise
• Splunk Secure Gateway
• Insecure deserialization

Improper Access Control for low-privileged user in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control