CVE-2023-32707

🗓️ 01 Jun 2023 16:34:30Reported by SplunkType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 272 Views🌐 WEB

CVE-2023-32707: Splunk Privilege Escalatio

Reporter	Title	Published	Views	Family All 19
0day.today	Splunk Enterprise Account Takeover Exploit	11 Sep 202300:00	–	zdt
0day.today	Splunk edit_user Capability Privilege Escalation Exploit	30 Oct 202300:00	–	zdt
GithubExploit	Exploit for Improper Authorization in Splunk	14 Nov 202304:06	–	githubexploit
BDU FSTEC	The configuration file authorize.conf of the Splunk Enterprise platform is vulnerable, allowing attackers to increase their privileges.	7 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-32707	5 Jun 202313:15	–	circl
CNNVD	Splunk 安全漏洞	1 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-32707 ‘edit_user’ Capability Privilege Escalation	1 Jun 202316:34	–	cvelist
Exploit DB	Splunk 9.0.5 - admin account take over	9 Oct 202300:00	–	exploitdb
Metasploit	Splunk "edit_user" Capability Privilege Escalation	26 Oct 202319:50	–	metasploit
NCSC	Vulnerabilities fixed in Splunk	2 Jun 202300:00	–	ncsc

NVD

Node

splunk splunkRange8.1.0–8.1.14enterprise

splunk splunkRange8.2.0–8.2.11enterprise

splunk splunkRange9.0.0–9.0.5enterprise

splunk splunk_cloud_platformRange<9.0.2303.100

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "8.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.1.14"
      },
      {
        "version": "8.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.2.11"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.5"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "-",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.2303.100"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2023-0602
research	www.research.splunk.com/application/39e1c326-67d7-4c0d-8584-8056354f6593/

Parameter	Position	Path	Description	CWE
output_mode	request body	en-US/splunkd/__raw/services/authentication/users/USERNAME	Privilege escalation by changing the password of a target user via the authentication API using the edit_user capability.	CWE-285
password	request body	en-US/splunkd/__raw/services/authentication/users/USERNAME	Privilege escalation by changing the password of a target user via the authentication API using the edit_user capability.	CWE-285
force-change-pass	request body	en-US/splunkd/__raw/services/authentication/users/USERNAME	Privilege escalation by changing the password of a target user via the authentication API using the edit_user capability.	CWE-285
locked-out	request body	en-US/splunkd/__raw/services/authentication/users/USERNAME	Privilege escalation by changing the password of a target user via the authentication API using the edit_user capability.	CWE-285
appfile	request body	en-US/manager/appinstall/_upload	Upload of a malicious app to Splunk via the appinstall endpoint to achieve code execution after password compromise.	CWE-285
state	request body	en-US/manager/appinstall/_upload	Upload of a malicious app to Splunk via the appinstall endpoint to achieve code execution after password compromise.	CWE-285
splunk_form_key	request body	en-US/manager/appinstall/_upload	Upload of a malicious app to Splunk via the appinstall endpoint to achieve code execution after password compromise.	CWE-285
force	request body	en-US/manager/appinstall/_upload	Upload of a malicious app to Splunk via the appinstall endpoint to achieve code execution after password compromise.	CWE-285
auto_cancel	request body	en-US/api/search/jobs	Execute a crafted search job to run commands from an uploaded app, enabling post-exploitation actions.	CWE-285
status_buckets	request body	en-US/api/search/jobs	Execute a crafted search job to run commands from an uploaded app, enabling post-exploitation actions.	CWE-285

17 Jun 2026 05:59Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.73537

SSVC

CWE-285