vendor:
Splunk Enterprise
by:
Redway Security
6.1
CVSS
HIGH
admin account takeover
CWE
Product Name: Splunk Enterprise
Affected Version From: Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14
Affected Version To:
Patch Exists: YES
Related CWE: CVE-2023-32707
CPE:
Platforms Tested:
2023
Splunk 9.0.5 – admin account take over
A low-privilege user who holds a role that has the `edit_user` capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted web requests.
Mitigation:
Upgrade to Splunk Enterprise 9.0.5, 8.2.11, or 8.1.14
