Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-42743

Local privilege escalation via a default path in Splunk Enterprise Windows

Description

A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk Enterprise versions before 8.1.1 on Windows.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 8.1 version(s) before 8.1.1affected

References