CVE-2025-20233 — Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing

CVE-2025-20233

Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing PUBLISHED

Description (CNA)

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk App for Lookup File Editing	affected 4.0 before 4.0.5

CWE

CWE-732

References

https://advisory.splunk.com/advisories/SVD-2025-0310

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.