Multiple vulnerabilities have been reported in Splunk products, which could allow an attacker to bypass authorization and authentication controls, execute arbitrary code, inject SPL/SQL commands, perform path traversal and server-side request forgery (SSRF), access sensitive information, conduct cross-site scripting (XSS) attacks, and escalate privileges on the targeted system.
Target Audience:
All organizations and individuals using Splunk products.
Risk Assessment:
Risk of unauthorized system access, remote code execution, data exfiltration, privilege escalation, information disclosure, server-side request forgery (SSRF), cross-site scripting (XSS), and compromise of the confidentiality, integrity, and availability of affected Splunk environments.
Impact Assessment:
Potential for unauthorized access, sensitive information disclosure, data exfiltration, arbitrary code execution, privilege escalation, SSRF attacks, security control bypass, and stored cross-site scripting (XSS).
The information provided herein is on "as is" basis, without warranty of any kind.