CVE-2022-43571
Assigner: Splunk
Published: 2022-11-03T22:56:44.862Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Splunk Enterprise
vendor: Splunk
versions: lessThan: 8.1.12
status: affected
version: 8.1
versionType: custom
lessThan: 8.2.9
status: affected
version: 8.2
versionType: custom
lessThan: 9.0.2
status: affected
version: 9.0
versionType: custom
credits: type: reporter
user: 00000000-0000-4000-9000-000000000000
value: Danylo Dmytriiev (DDV_UA)
datePublic: 2022-11-03T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <p>In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.</p>
value: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-94
description: CWE-94 Improper Control of Generation of Code (Code Injection)
type: CWE
source: advisory: SVD-2022-1111
discovery: EXTERNAL
title: Remote Code Execution through dashboard PDF generation component in Splunk Enterprise
x_generator: engine: Vulnogram 0.1.0-dev