Description
Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Splunk Enterprise | Splunk / Splunk Enterprise | >= 10.0, < 10.0.7 | affected |
| Splunk Enterprise | Splunk / Splunk Enterprise | >= 10.2, < 10.2.4 | affected |