CVE-2023-3997 | BDVDB-2026-208339 Detail

Description#

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to view the poisoned logs, this can tamper with the terminal and cause possible malicious code execution from the terminal user’s action.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-07-31Record published in the CVE List.
2. Version 22025-02-28Most recent update recorded in the CVE List.