Vulnerability Details : CVE-2023-32707

Public exploit exists!
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted web requests.
Published 2023-06-01 17:15:10
Updated 2023-10-31 17:15:23
Source Splunk Inc.
View at NVD,   CVE.org

Products affected by CVE-2023-32707

Exploit prediction scoring system (EPSS) score for CVE-2023-32707

EPSS FAQ
89.85%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2023-32707

  • Splunk "edit_user" Capability Privilege Escalation
    Disclosure Date: 2023-06-01
    First seen: 2023-10-27
    exploit/multi/http/splunk_privilege_escalation_cve_2023_32707
    A low-privileged user who holds a role that has the "edit_user" capability assigned to it can escalate their privileges to that of the admin user by providing a specially crafted web request. This is because the "edit_user" capability does not honor the "grantableRoles

CVSS scores for CVE-2023-32707

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
8.8
 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2.8
5.9
 NIST
8.8
 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2.8
5.9
 Splunk Inc.

References for CVE-2023-32707

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close