Description (CNA)
Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to view the poisoned logs, this can tamper with the terminal and cause possible malicious code execution from the terminal user’s action.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Splunk / Splunk SOAR (On-premises) | affected - before 6.1.0 |
| Splunk / Splunk SOAR (Cloud) | affected - before 6.1.0 |
CWE
CWE-117
References
ADP enrichment
No English description supplied.