CVE-2023-3997

Summary

CVE-2023-3997: Splunk SOAR versions below 6.1.0 are susceptible to log file poisoning due to a vulnerability triggered by maliciously crafted web requests. These requests contain specific ANSI characters that can manipulate logs. When users attempt to view the tampered logs in their terminal, they may inadvertently execute malicious code, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.