Splunk Enterprise Privilege Escalation (CVE-2023-32707)

Check Point Reference: CPAI-2023-1387 Date Published: 20 Dec 2023 Severity: High Last Updated: Wednesday 20 December, 2023 Source: Industry Reference:CVE-2023-32707
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Splunk Enterprise 8.1.0 and later, prior to 8.1.14
Splunk Enterprise 8.2.0 and later, prior to 8.2.11
Splunk Enterprise 9.0.0 and later, prior to 9.0.5
Splunk Cloud Platform prior to 9.0.2303.100 Vulnerability Description A privilege escalation vulnerability exists in Splunk Enterprise. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system.