CVE-2023-3997: Improper Output Neutralization for Logs

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to vi...

PT-2023-4030 · Splunk · Splunk Soar

Name of the Vulnerable Software and Affected Versions: Splunk SOAR versions prior to 6.1.0 Description: The issue is related to the incorrect handling of log output, which can be exploited by sending a maliciously crafted web request containing special ANSI characters to cause log file poisoning...