Skip to content
OpenAdvisories
High · 8.8 CVE-2021-42743 EUVD-2021-29702GHSA-h2qf-x496-gm8q

Local privilege escalation via a default path in Splunk Enterprise Windows

Published May 6, 2022 · Updated Aug 4, 2024 · Assigned by Splunk

Description

A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk Enterprise versions before 8.1.1 on Windows.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 8.1 version(s) before 8.1.1 —

References