CVE-2025-22621

Description

In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `admin_all_objects` capability to the `splunk_app_soar` role. This addition could lead to improper access control for a low-privileged user that does not hold the "admin" Splunk roles.

Reserved 2025-01-07 | Published 2025-01-07 | Updated 2025-01-15 | Assigner Splunk

Problem types

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Product status

1.0 before 1.0.71
affected

Credits

Gabriel Nitu, Splunk

References

advisory.splunk.com/advisories/SVD-2025-0101

cve.org (CVE-2025-22621)

nvd.nist.gov (CVE-2025-22621)

Download JSON