CVE-2023-32713CWE-269

Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream

High · published June 1, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-06-01T16:34Z
EPSS history
Timeline
  • 01 JUN 16:34Z
    Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream
    cvelistv5