In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Splunk
Published: 2022-11-04T22:19:55.669Z
Updated: 2024-08-03T13:32:59.588Z
Reserved: 2022-10-20T18:37:09.181Z
Link: CVE-2022-43563
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-04T23:15:09.887
Modified: 2024-11-21T07:26:47.490
Link: CVE-2022-43563
Redhat
No data.