| Package | Affected versions | Patched versions |
|---|---|---|
| universal forwarder | ≥ 9.1.0, < 9.1.9≥ 9.2.0, < 9.2.6≥ 9.3.0, < 9.3.4≥ 9.4.0, < 9.4.2 | 9.1.99.2.69.3.49.4.2 |
In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free