Beveiligingsadvies

CVE-2026-20260

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-10 17:16:20

Laatst bijgewerkt 2026-06-10 18:23:13

Toegewezen door cisco

CVSS-score 4.3

Status PUBLISHED

Beschrijving

In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute (ANSI) escape codes into SOAR application log files through specially crafted HTTP request paths, which a terminal emulator might interpret when an administrator views the logs.<br><br>The injection is possible because SOAR does not strip control characters from HTTP request paths before writing them to application logs.

← Alle CVE's bekijken Bekijk op cve.org ↗