Splunk SOAR.

Files or Directories Accessible to External Parties in Splunk SOAR

• Splunk SOAR
• Information disclosure

Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR

• Splunk SOAR
• CWE-647

Improper Protection of Alternate Path in Splunk SOAR

• Splunk SOAR
• CWE-424

Protection Mechanism Failure in Splunk SOAR

• Splunk SOAR
• CWE-693

Improper Check or Handling of Exceptional Conditions in Splunk SOAR

• Splunk SOAR
• CWE-703

Improper Neutralization in Splunk SOAR

• Splunk SOAR
• CWE-707

Improper Control of a Resource Through its Lifetime in Splunk SOAR

• Splunk SOAR
• CWE-664

Improper Access Control in Splunk SOAR

• Splunk SOAR
• Broken access control

Information Disclosure through REST API Authentication in Splunk SOAR

• Splunk SOAR
• Information disclosure

Missing Authorization through the REST API in Splunk SOAR

• Splunk SOAR
• Broken access control

Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR

• Splunk SOAR
• Information disclosure

Information Disclosure through REST API Query Filters in Splunk SOAR

• Splunk SOAR
• Information disclosure

Improper Access Control during App Downloads in Splunk SOAR

• Splunk SOAR
• Broken access control

Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR

• Splunk SOAR
• Broken access control

Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR

• Splunk SOAR
• Cross-site scripting (XSS)

Information Disclosure through the REST API in Splunk SOAR

• Splunk SOAR
• Broken access control

Path Traversal through Automation Broker in Splunk SOAR

• Splunk SOAR
• Path traversal

Missing Authorization through Playbooks in Splunk SOAR

• Splunk SOAR
• Broken access control

Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR

• Splunk SOAR
• Cross-site scripting (XSS)

Information Disclosure through the REST API in Splunk SOAR

• Splunk SOAR
• Information disclosure

Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR

• Splunk SOAR
• Other injection

Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR

• Splunk SOAR
• SQL injection

Structured Query Language Injection through the REST API in Splunk SOAR

• Splunk SOAR
• Other injection

Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR

• Splunk SOAR
• Weak cryptography or TLS

Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

• Splunk SOAR
• Server-side request forgery (SSRF)

Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR

• Splunk SOAR
• Broken access control

Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

• Splunk SOAR
• Path traversal

Path Traversal through App Installation Tar Extraction in Splunk SOAR

• Splunk SOAR
• Path traversal

Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

• Splunk SOAR
• Path traversal

Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

• Splunk SOAR
• Authentication bypass

Log Injection through HTTP Request Paths in Splunk SOAR

• Splunk SOAR
• Other injection