Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Splunk 代码注入漏洞
Vulnerability Description
Splunk是美国Splunk公司的一套数据收集分析软件。该软件主要用于收集、索引和分析机器产生的数据,包括所有IT系统和基础结构(物理、虚拟和云)生成的数据。 Splunk 5.0.4及之前版本的‘runshellscript echo.sh’脚本中存在安全漏洞。远程攻击者可通过发送特制的字符串利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A