CVE-2025-20233CWE-732

Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing

Low · published March 26, 2025

CVSS v3.1
2.5
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-03-26T22:06Z
EPSS history
Timeline
  • 26 MAR 22:06Z
    Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing
    cvelistv5