PT-2022-11673 · Splunk · Splunk Enterprise

Ilias Dimopoulos · Published 2022-05-06 · Updated 2022-05-17 · CVE-2021-42743

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 8.1.1

Description A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user. This issue affects Splunk Enterprise on Windows.

Recommendations For versions prior to 8.1.1, update to version 8.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the node default path to minimize the risk of exploitation.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-42743

Affected Products

Splunk Enterprise

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-42743 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42743 · Vendor Advisory
• https://splunk.com/en_us/product-security/announcements/svd-2022-0501.html · Vendor Advisory
• https://t.me/cvenotify/30320 · Telegram Post
• https://t.me/cibsecurity/42125 · Telegram Post