Missing Access Control of Saved Searches in the Splunk Archiver app

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could turn off the scheduled search `Bucket Copy Trigger` within the Splunk Archiver application. This is because of missing access controls in the saved searches for this app.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

访问控制不恰当

Splunk Enterprise 访问控制错误漏洞

Splunk Enterprise是美国Splunk公司的一套数据收集分析软件。 Splunk Enterprise存在访问控制错误漏洞，该漏洞源于访问控制缺失，可能导致关闭计划搜索。以下版本受到影响：9.4.3、9.3.5、9.2.7和9.1.10之前版本。

N/A

N/A