Description

Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute arbitrary code on all other Universal Forwarder endpoints subscribed to the deployment server.

Related CPE's

a

splunk

splunk

*

*

*

*

enterprise

Vulnerable

References

https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates

Release NotesVendor Advisory

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0608.html

Vendor Advisory

https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates

Release NotesVendor Advisory

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0608.html

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-284

[email protected]

Primary
NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

9 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-06-15T15:15:09.267Z

3 years ago

Last modified

2024-11-21T06:05:51.657Z

1 year ago