CVE-2023-32713 | THREATINT

Description

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.

Reserved 2023-05-11 | Published 2023-06-01 | Updated 2025-01-02 | Assigner Splunk

HIGH: 7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Product status

8.1 before 8.1.1

affected

Credits

Ben Leonard-Lagarde & Lucas Fedyniak-Hopes (Modux)

References

advisory.splunk.com/advisories/SVD-2023-0607

cve.org (CVE-2023-32713)

nvd.nist.gov (CVE-2023-32713)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.