exploit/multi/http/splunk_privilege_escalation_cve_2023_32707

weaponized

Splunk "edit_user" Capability Privilege Escalation

view exploit source metasploittype exploitpublished 2023-06-01catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-32707UShigh8.8OT highExploit
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_us…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan