PT-2020-7559
CVE-2013-6773
·
Published
2020-01-23
·
Updated
2020-01-27
Description by
CVSS 2.0
4.6
MediumMetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Splunk version 5.0.3
Description:
The issue allows an attacker to escalate privileges due to an Unquoted Service Path in Windows for Universal Forwarder.
Recommendations:
For version 5.0.3, update to a version that quotes the service path to prevent privilege escalation.
Found an issue in the description? Have something to add? Feel free to write us 👾