8

CVE-2025-20298

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents.

Data is provided by the National Vulnerability Database (NVD)
Splunk ≫ Universal Forwarder Version >= 9.1.0 < 9.1.9
   Microsoft ≫ Windows Version-
Splunk ≫ Universal Forwarder Version >= 9.2.0 < 9.2.6
   Microsoft ≫ Windows Version-
Splunk ≫ Universal Forwarder Version >= 9.3.0 < 9.3.4
   Microsoft ≫ Windows Version-
Splunk ≫ Universal Forwarder Version >= 9.4.0 < 9.4.2
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.189
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@cisco.com 8 2.1 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.