| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | ≥ 9.0.0, < 9.0.6≥ 9.1.0, < 9.1.1< 8.2.12 | 9.0.69.1.18.2.12 |
| splunk cloud platform | < 9.0.2305.200 | 9.0.2305.200 |
In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From there, a user can execute arbitrary code on the Splunk platform Instance.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free