CVE-2021-42743 — Local privilege escalation via a default path in Splunk Enterprise Windows

CVE-2021-42743

Local privilege escalation via a default path in Splunk Enterprise Windows PUBLISHED

Description (CNA)

A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk Enterprise versions before 8.1.1 on Windows.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 8.1 version(s) before 8.1.1

CWE

CWE-427

References

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0501.html

ADP enrichment

CVE

No English description supplied.

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0501.html