Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2022-32158

Splunk Enterprise deployment servers allow client publishing of forwarder bundles

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute arbitrary code on all other Universal Forwarder endpoints subscribed to the deployment server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk, Inc Splunk Enterprise

  • 9.0 to < 9.0affected
  • 8.2 to < 8.2.6.1affected
  • 8.1 to < 8.1.10.1affected

References