critical9.0
CVE-2013-7394
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string.
Impact
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | through 5.0.4 Versions 5.0, 5.0.1, 5.0.2, 5.0.3 |