CVE-2022-43567CWE-502

Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

High · published November 4, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01304 · 70.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-11-04T22:21Z
EPSS history
Timeline
  • 04 NOV 22:21Z
    Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature
    cvelistv5