PT-2023-8938 · Splunk · Splunk Enterprise+1

Torjus Bryne Retterstøl · Published 2023-06-01 · Updated 2024-04-10 · CVE-2023-32714

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Splunk App for Lookup File Editing versions prior to 4.0.1 Splunk Enterprise (affected versions not specified)

Description The issue is related to incorrect restriction of a directory path name with limited access. Exploitation may allow a remote attacker to read and write arbitrary files in the system using a specially crafted HTTP request. A low-privileged user can trigger a path traversal exploit with a specially crafted web request to read and write to restricted areas of the Splunk installation directory.

Recommendations For Splunk App for Lookup File Editing versions prior to 4.0.1, update to version 4.0.1 or later to resolve the issue. For Splunk Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-35

CWE-22

Related Identifiers

BDU:2024-02734

CVE-2023-32714

Affected Products

Splunk App For Lookup File Editing

Splunk Enterprise

References · 8

• https://research.splunk.com/application/8ed58987-738d-4917-9e44-b8ef6ab948a6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32714 · Security Note
• https://bdu.fstec.ru/vul/2024-02734 · Security Note
• https://advisory.splunk.com/advisories/SVD-2023-0608 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32714 · Vendor Advisory
• https://t.me/cvenotify/51574 · Telegram Post
• https://vuldb.com/de/?id.230493 · Note
• https://cybersecurity-help.cz/vdb/SB2023060838 · Note