CVE-2023-32713 Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user...

CVE-2023-32713 Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user...

CVE-2023-32713

The evidence across sources confirms CVE-2023-32713 affects Splunk App for Stream versions prior to 8.1.1, where a low-privilege user can abuse the streamfwd process to escalate privileges on the Splunk Enterprise host up to root. Mitigation per PT-2023-23981 and NVD/NIST references is to upgrade...