CVEvulnerability
CVE-2022-43567
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-502
Description
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.
Affected configurations
• splunk splunk (>= 8.1.0 < 8.1.12)
• splunk splunk (>= 8.2.0 < 8.2.9)
• splunk splunk (>= 9.0.0 < 9.0.2)
• splunk splunk cloud platform (< 9.0.2205)
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness
References
- https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/ Exploit, Vendor Advisory
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html Vendor Advisory
- https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/ Exploit, Vendor Advisory
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html Vendor Advisory