CVE-2023-32707

🗓️ 01 Jun 2023 16:34:30Reported by SplunkType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 264 Views🌐 WEB

CVE-2023-32707: Splunk Privilege Escalatio

Reporter	Title	Published	Views	Family All 19
0day.today	Splunk Enterprise Account Takeover Exploit	11 Sep 202300:00	–	zdt
0day.today	Splunk edit_user Capability Privilege Escalation Exploit	30 Oct 202300:00	–	zdt
GithubExploit	Exploit for Improper Authorization in Splunk	14 Nov 202304:06	–	githubexploit
BDU FSTEC	The configuration file authorize.conf of the Splunk Enterprise platform is vulnerable, allowing attackers to increase their privileges.	7 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-32707	5 Jun 202313:15	–	circl
CNNVD	Splunk 安全漏洞	1 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-32707 ‘edit_user’ Capability Privilege Escalation	1 Jun 202316:34	–	cvelist
Exploit DB	Splunk 9.0.5 - admin account take over	9 Oct 202300:00	–	exploitdb
Metasploit	Splunk "edit_user" Capability Privilege Escalation	26 Oct 202319:50	–	metasploit
NCSC	Vulnerabilities fixed in Splunk	2 Jun 202300:00	–	ncsc

NVD

Node

splunk splunkRange8.1.0–8.1.14enterprise

splunk splunkRange8.2.0–8.2.11enterprise

splunk splunkRange9.0.0–9.0.5enterprise

splunk splunk_cloud_platformRange<9.0.2303.100

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "8.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.1.14"
      },
      {
        "version": "8.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.2.11"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.5"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "-",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.2303.100"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2023-0602
research	www.research.splunk.com/application/39e1c326-67d7-4c0d-8584-8056354f6593/

Parameter	Position	Path	Description	CWE
<USERNAME>	path	/en-US/splunkd/__raw/services/authentication/users/<USERNAME>	Privilege escalation by changing the target user's password via the vulnerable authentication endpoint when the attacker has edit_user capability.	CWE-285
output_mode	path	/en-US/splunkd/__raw/services/authentication/users/<USERNAME>	Privilege escalation by changing the target user's password via the vulnerable authentication endpoint when the attacker has edit_user capability.	CWE-285
password	path	/en-US/splunkd/__raw/services/authentication/users/<USERNAME>	Privilege escalation by changing the target user's password via the vulnerable authentication endpoint when the attacker has edit_user capability.	CWE-285
force-change-pass	path	/en-US/splunkd/__raw/services/authentication/users/<USERNAME>	Privilege escalation by changing the target user's password via the vulnerable authentication endpoint when the attacker has edit_user capability.	CWE-285
locked-out	path	/en-US/splunkd/__raw/services/authentication/users/<USERNAME>	Privilege escalation by changing the target user's password via the vulnerable authentication endpoint when the attacker has edit_user capability.	CWE-285

17 Jun 2026 05:59Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.73537

SSVC

CWE-285