[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftzZjVecxdR6dZT1pvWWM7XVvf6BNXuSsg4Iy_TsvyZM":3,"g5a-risk:CVE-2023-32713":104},{"success":4,"data":5,"meta":101},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":47,"weaknesses":54,"weaknessesCount":47,"isActivelyExploited":63,"cisaInfo":27,"otxData":27,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":99,"notableEvents":100},"CVE-2023-32713","What is CVE-2023-32713?","In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.","In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to e...","2023-06-01T17:15:10.453","2024-04-10T01:15:14.347",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"prodsec@splunk.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","LOCAL",7.8,1.1,0.00325,[38,38,38,38,38,38,38],"Critical",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"splunk","splunk_app_for_stream","*","cpe:2.3:a:splunk:splunk_app_for_stream:*:*:*:*:*:*:*:*",1,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fadvisory.splunk.com\u002Fadvisories\u002FSVD-2023-0607","Splunk",[53],"Vendor Advisory",[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2023-32713? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-32713, a critical severity cyber security vulnerability from 2023. In Splunk App for Stream versions below 8.1.1, a low-pr...","CVE-2023-32713, CVE-2023-32713 vulnerability, CVE-2023-32713 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, splunk security, splunk_app_for_stream vulnerability","\u002Fwhat-is\u002Fcve-2023-32713",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-32713","Cybersecurity","CVE-2023-32713, CVE-2023-32713 vulnerability, CVE-2023-32713 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":27,"Negate":27,"Nodes":92},[93],{"Operator":94,"Negate":27,"CPEMatch":95},"OR",[96],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":97,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":98,"VersionEndIncluding":27},"1935738E-D4ED-4D2E-B984-FACD89EEAF7F","8.1.1",[],[],{"lastModified":11,"cacheTime":102,"version":103},1792247125004,"2.0",{"score":105,"band":106,"action":107,"scoredAt":108},54,"Medium","Plan remediation","2026-10-16T06:58:11.93745+00:00"]