Skip to content
Threat Feed
Subscribe

Product

Enterprise Security

1 brief RSS
high advisory

Privilege Escalation in Splunk Enterprise Security via UEBA Search Macros

Splunk Enterprise Security versions below 8.6.1 contain a privilege escalation vulnerability where users with the ess_analyst role can modify UEBA search macros, allowing for unauthorized execution of administrative queries.

Enterprise Security privilege-escalation splunk vulnerability
1t 1c