CVE-2022-43567 — Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted req…
Published: 2022-11-04 · CVSS: 8.8 · CVSS 3.1
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7