In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Splunk Enterprise for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.
2025-12-03T17:15:51.080
2025-12-05T17:51:41.637
Analyzed
CVSSv3.1: 8.0 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | splunk | splunk | < 9.2.10 | Yes |
| Application | splunk | splunk | < 9.3.8 | Yes |
| Application | splunk | splunk | < 9.4.6 | Yes |
| Application | splunk | splunk | < 10.0.2 | Yes |
| Operating System | microsoft | windows | - | No |