⤷ Title: High-Severity Splunk Flaw Allows Local Privilege Escalation via Incorrect File Permissions on Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 00:30:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_20386 #Incorrect Permissions #privilege escalation #Splunk #Universal Forwarder #Windows Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 00:30:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_20386 #Incorrect Permissions #privilege escalation #Splunk #Universal Forwarder #Windows Security
Daily CyberSecurity
High-Severity Splunk Flaw Allows Local Privilege Escalation via Incorrect File Permissions on Windows
A High-severity flaw (CVSS 8.0) in Splunk Enterprise/Universal Forwarder for Windows allows low-privileged users to access/tamper with sensitive installation directories due to incorrect permissions. Update to v10.0.2+.