CVE-2013-7394
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
- Score
- CVSS 2.0 9.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2014-08-07
- Last modified
- 2024-08-06
- Weaknesses
- CWE-94
Affected products
References
- http://www.splunk.com/view/SP-CAAAH76
- http://zerodayinitiative.com/advisories/ZDI-14-053/
