← CVE Intelligence

CVE-2025-20387

Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade PUBLISHED

Description (CNA)

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.

Affected (CNA)

Vendor / productVersions
Splunk / Splunk Enterpriseaffected 10.0 before 10.0.2; affected 9.4 before 9.4.6; affected 9.3 before 9.3.8; affected 9.2 before 9.2.10

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.