CVE-2025-22621 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `admin_all_objects` capability to the `spl…
Medium CVSS: 6.4

CVE-2025-22621

In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `admin_all_objects` capability to the `splunk_app_soar` role. This addition could lead to improper access control for a low-privileged user that does not hold the "admin" Splunk roles.
Vendor
-
Product
-
CWE
CWE-269
Yayın Tarihi
2025-01-07 17:15:35
Güncelleme
2025-01-15 17:15:20
Source Identifier
prodsec@splunk.com
KEV Date Added
-

Kategoriler

Referanslar